Update cartservice

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
Grpc.AspNetCore	2.59.0 -> 2.71.0					nuget	minor
Grpc.AspNetCore.HealthChecks	2.59.0 -> 2.71.0					nuget	minor
Grpc.Net.Client	2.59.0 -> 2.71.0					nuget	minor
Microsoft.AspNetCore.TestHost (source)	8.0.0 -> 8.0.20					nuget	patch
Microsoft.NET.Test.Sdk	17.8.0 -> 17.14.1					nuget	minor
OpenTelemetry.Exporter.OpenTelemetryProtocol (source)	1.6.0 -> 1.12.0					nuget	minor
OpenTelemetry.Extensions.Hosting (source)	1.6.0 -> 1.12.0					nuget	minor
OpenTelemetry.Instrumentation.AspNetCore (source)	1.6.0-beta.3 -> 1.12.0					nuget	minor
OpenTelemetry.Instrumentation.Http (source)	1.6.0-beta.3 -> 1.12.0					nuget	minor
OpenTelemetry.Instrumentation.Process (source)	0.5.0-beta.3 -> 0.5.0-beta.7					nuget	patch
OpenTelemetry.Instrumentation.Runtime (source)	1.5.1 -> 1.12.0					nuget	minor
OpenTelemetry.Instrumentation.StackExchangeRedis (source)	1.0.0-rc9.12 -> 1.0.0-rc9.15					nuget	patch
OpenTelemetry.ResourceDetectors.Container (source)	1.0.0-beta.4 -> 1.0.0-beta.7					nuget	patch
StackExchange.Redis (source)	2.7.4 -> 2.9.17					nuget	minor
mcr.microsoft.com/dotnet/runtime-deps	8.0.0-alpine3.18 -> 8.0.6-alpine3.18					final	patch
mcr.microsoft.com/dotnet/sdk	8.0.100-1 -> 8.0.401-1					stage	patch
xunit	2.6.2 -> 2.9.3					nuget	minor
xunit.runner.visualstudio	2.5.4 -> 2.8.2					nuget	minor

---

Release Notes

grpc/grpc-dotnet (Grpc.AspNetCore)

v2.71.0

What's Changed

• Remove old dotnet-core feed by @​JamesNK in #​2611
• Bump axios from 1.7.4 to 1.8.4 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2615
• Bump @​babel/helpers from 7.25.0 to 7.27.0 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2616
• Bump tar-fs from 3.0.6 to 3.0.8 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2619
• Fix race condition that caused inprogress connect to be canceled by @​JamesNK in #​2618
• Bump tools package to 2.71 by @​apolcyn in #​2621
• Update NuGet package versions by @​JamesNK in #​2620
• bump version to 2.71.0-pre1 by @​apolcyn in #​2622
• Bump version on 2.71 for final release by @​apolcyn in #​2627

Full Changelog: grpc/grpc-dotnet@v2.70.0...v2.71.0

v2.70.0

What's Changed

• update ArgumentNullException.ThrowIfNull usage by @​WeihanLi in #​2563
• use nameof for CallerArgumentExpression by @​WeihanLi in #​2562
• Correctness: Make some private & internal classes sealed where possible by @​Henr1k80 in #​2559
• Bump vue from 2.6.14 to 3.0.0 in /examples/Spar/Server/ClientApp by @​dependabot in #​2565
• Bump cross-spawn from 7.0.3 to 7.0.6 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2574
• [vote]Added Active maintainers into MAINTAINERS.md. by @​subhraOffGit in #​2449
• Refactor: Use await using for packageVersionStream to ensure proper disposal of async resources by @​dexcompiler in #​2521
• Performance microoptimizations by @​Henr1k80 in #​2558
• Complete health checks watch service on server shutting down by @​JamesNK in #​2582
• Avoid using ConcurrentDictionary for channels with few methods by @​JamesNK in #​2597
• Bump elliptic from 6.6.0 to 6.6.1 in /examples/Spar/Server/ClientApp by @​dependabot in #​2599
• Move updating connectivity state outside of subchannel lock by @​JamesNK in #​2601
• Bump Grpc.Tools dependency by @​apolcyn in #​2603
• bump version on v2.70.x branch by @​apolcyn in #​2604
• Change version to 2.70.0 by @​JamesNK in #​2610

New Contributors

• @​Henr1k80 made their first contribution in #​2559
• @​subhraOffGit made their first contribution in #​2449
• @​dexcompiler made their first contribution in #​2521

Full Changelog: grpc/grpc-dotnet@v2.67.0...v2.70.0

v2.67.0

What's Changed

• precompile condition clean by @​Varorbc in #​2528
• Log server cancellation errors at info level by @​JamesNK in #​2527
• Update logging to use generated logs by @​wabalubdub in #​2531
• Bump serve-static from 1.14.2 to 1.16.2 in /examples/Spar/Server/ClientApp by @​dependabot in #​2536
• Update to Grpc.Tools 2.67.0-pre1 by @​JamesNK in #​2547
• Cleanup gRPC unit testing helpers in tester sample by @​JamesNK in #​2548
• Fix UpdateBalancingState not called when address attributes are modified by @​JamesNK in #​2553
• Update Grpc.Tools to 2.67.0 by @​JamesNK in #​2554
• Fix System.Text.Json vulnerability warning by @​JamesNK in #​2556
• Update package dependencies to 9.0 RC2 by @​JamesNK in #​2560
• Bump elliptic from 6.5.7 to 6.6.0 in /examples/Spar/Server/ClientApp by @​dependabot in #​2567
• Update to .NET 9 RTM by @​JamesNK in #​2571

New Contributors

• @​wabalubdub made their first contribution in #​2531

Full Changelog: grpc/grpc-dotnet@v2.66.0...v2.67.0

v2.66.0

What's Changed

• Bump version on master to 2.66.0-dev by @​stanley-cheung in #​2491
• Fix failure to create GrpcChannel under Wine compatibility layer (including Steam Proton and Apple Game Porting Toolkit) by @​mayuki in #​2496
• Update .NET 9 SDK and resolve warnings by @​sebastienros in #​2502
• Bump braces from 3.0.2 to 3.0.3 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2504
• Bump axios from 1.6.2 to 1.7.4 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2505
• Update puppeteer by @​JamesNK in #​2507
• Remove internal_ci flag from interop test script by @​JamesNK in #​2509
• Fix Google auth interop test by @​JamesNK in #​2512
• [testing] improve sanity check in jwt_token_creds interop test by @​apolcyn in #​2513
• Add HTTP version configuration to GrpcChannelOptions by @​JamesNK in #​2514
• Bump grpc.tools version to 2.66 by @​apolcyn in #​2523
• Bump webpack from 5.76.0 to 5.94.0 in /examples/Browser/Server/wwwroot by @​dependabot in #​2522
• Bump elliptic from 6.5.4 to 6.5.7 in /examples/Spar/Server/ClientApp by @​dependabot in #​2525
• Bump micromatch from 4.0.7 to 4.0.8 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2524
• Bump v2.66.x branch to 2.66.0.pre1 by @​apolcyn in #​2526
• Bump v2.66.x to v2.66.0 by @​apolcyn in #​2539

Full Changelog: grpc/grpc-dotnet@v2.65.0...v2.66.0

v2.65.0

What's Changed

• Update Native.DetectWindowsVersion() to consider Windows Server 2019 to be Window Server by @​wrall in #​2468
• Bump master version to 2.65.0-dev by @​stanley-cheung in #​2472
• Reduce usage of RunContinuationsAsynchronously by @​JamesNK in #​2478
• Bump Grpc.Tools version to 2.65.0 by @​stanley-cheung in #​2488
• Bump version to 2.65.0-pre1 by @​stanley-cheung in #​2490
• Bump release version to 2.65.0 by @​stanley-cheung in #​2495

New Contributors

• @​wrall made their first contribution in #​2468

Full Changelog: grpc/grpc-dotnet@v2.64.0...v2.65.0

v2.64.0

What's Changed

• doc: fix typo by @​WeihanLi in #​2432
• doc: fix typo by @​WeihanLi in #​2431
• ci: upgrade checkout action version by @​WeihanLi in #​2434
• build: configure rollForward in global.json by @​WeihanLi in #​2437
• Support some HttpClientAction settings and log debug message instead of an error by @​JamesNK in #​2448
• Assign primary handler before other configuration by @​JamesNK in #​2445
• Update various package versions by @​JamesNK in #​2453
• Update Grpc.Tools to 2.64.0 by @​JamesNK in #​2456
• Change functional tests to use dynamic ports by @​JamesNK in #​2458
• Add WriteResponseHeadersAsync test by @​JamesNK in #​2452
• Update repo for .NET 9 by @​JamesNK in #​2457
• Fix flaky ConnectTimeout_MultipleCalls_AttemptReconnect test by @​JamesNK in #​2460
• Bump branch version to 2.64.0-pre1 by @​stanley-cheung in #​2471
• [2.64.x] Update Native.DetectWindowsVersion() to consider Windows Server 2019 to be Window Server by @​JamesNK in #​2473
• Bump version to 2.64.0 by @​stanley-cheung in #​2487

Full Changelog: grpc/grpc-dotnet@v2.63.0...v2.64.0

v2.63.0

What's Changed

• Prevent block inside ResolveAsync from blocking PollingResolver.Refresh by @​JamesNK in #​2385
• Bump follow-redirects from 1.15.4 to 1.15.6 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2392
• Update microsoft-support.md by @​JamesNK in #​2403
• fix a couple typos in README.md by @​jjanuszkiewicz in #​2397
• Interrupt existing subchannel connect attempt when reconnect is requested by @​JamesNK in #​2410
• Update Directory.Packages.props by @​WeihanLi in #​2413
• #​2401 Add new TFM's so package dependency can be removed by @​thompson-tomo in #​2402
• support ReadAllAsync for netstandard2.0 by @​WeihanLi in #​2411
• Fix ObjectDisposedException message by @​drewnoakes in #​2415
• Enable multiple connections with WinHttpHandler by default by @​JamesNK in #​2416
• Fix memory leak when using call context propagation with cancellation token by @​JamesNK in #​2421
• Fix HTTP/3 test errors on .NET 6 by @​JamesNK in #​2423
• Add semaphore to limit subchannel connect to prevent race conditions by @​JamesNK in #​2422
• Don't capture async locals in resolver by @​JamesNK in #​2426
• Update Grpc.Tools to 2.63 by @​apolcyn in #​2429
• Bump 2.63.x branch to 2.63.0-pre1 by @​apolcyn in #​2430
• Fix build on v2.63.x - cherry pick #​2437 by @​apolcyn in #​2442
• Bump 2.63.x to stable release by @​apolcyn in #​2440

New Contributors

• @​jjanuszkiewicz made their first contribution in #​2397
• @​thompson-tomo made their first contribution in #​2402
• @​drewnoakes made their first contribution in #​2415

Full Changelog: grpc/grpc-dotnet@v2.62.0...v2.63.0

v2.62.0

What's Changed

• Set default streams value in grpc-client.yml by @​sebastienros in #​2379
• Fix OS detection error in UWP by @​JamesNK in #​2376
• Update Grpc.Tools version to 2.62 by @​apolcyn in #​2382
• Bump v2.62.x to pre1 by @​apolcyn in #​2383
• Bump v2.62.x version for final release by @​apolcyn in #​2400

Full Changelog: grpc/grpc-dotnet@v2.61.0...v2.62.0

v2.61.0

What's Changed

• Update Grpc.Tools to 2.60.0 by @​JamesNK in #​2336
• Bump dev version to 2.61.0-dev on master branch by @​stanley-cheung in #​2337
• Fix cancellation token reported when using retries by @​JamesNK in #​2345
• First pass at Grpc.StatusProto API by @​tonydnewell in #​2205
• Add ProtoStatus example by @​JamesNK in #​2273
• Grpc.StatusProto clean up by @​JamesNK in #​2349
• Bump follow-redirects from 1.15.3 to 1.15.4 in /testassets/InteropTestsGrpcWebWebsite/Tests by @​dependabot in #​2352
• Add key services tests for service and interceptor by @​JamesNK in #​2356
• Allow GrpcChannel to use WinHttpHandler on Windows Server 2019 by @​JamesNK in #​2362
• Add .NET 9 NuGet feed by @​JamesNK in #​2365
• Add missing package mapping for net9 feed by @​JamesNK in #​2366
• proposal: Build changelog based on previous stable version by @​tomkerkhove in #​2269
• Bump Grpc.Tools to 1.61.0 by @​apolcyn in #​2370
• Bump versions on v2.61.x by @​apolcyn in #​2371
• Bump to v2.61.0 on v2.61.x branch by @​apolcyn in #​2374

New Contributors

• @​tonydnewell made their first contribution in #​2205
• @​tomkerkhove made their first contribution in #​2269

Full Changelog: grpc/grpc-dotnet@v2.60.0...v2.61.0

v2.60.0

What's Changed

• Update to GA .NET 8 SDK by @​JamesNK in #​2321
• Update to use Directory.Packages.props by @​JamesNK in #​2315
• Add Native AOT test by @​JamesNK in #​2324
• Trim regex from Grpc.AspNetCore by @​JamesNK in #​2326

Full Changelog: grpc/grpc-dotnet@v2.59.0...v2.60.0

dotnet/aspnetcore (Microsoft.AspNetCore.TestHost)

v8.0.20: .NET 8.0.20

Release

What's Changed

• Update branding to 8.0.20 by @​vseanreesermsft in #​63106
• [release/8.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @​dependabot[bot] in #​63038
• [release/8.0] Dispose the certificate chain elements with the chain by @​MackinnonBuck in #​62994
• [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot] in #​63117
• [release/8.0] [SignalR] Don't throw for message headers in Java client by @​github-actions[bot] in #​62784
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​63152
• [release/8.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​63188
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​63189

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

v8.0.19

v8.0.18: .NET 8.0.18

Release

What's Changed

• Update branding to 8.0.18 by @​vseanreesermsft in #​62241
• [release/8.0] Update Alpine helix references by @​github-actions in #​62243
• [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @​dependabot in #​62201
• [8.0] Delete src/arcade directory by @​akoeplinger in #​61994
• [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in #​62037
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in #​62006
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61944
• [release/8.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in #​62247
• [release/8.0] Block test that is failing after switching to latest-chrome by @​github-actions in #​62284
• backport(net8.0): http.sys on-demand TLS client hello retrieval by @​DeagleGross in #​62290
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

v8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

v8.0.16: .NET 8.0.16

Release

What's Changed

• Update branding to 8.0.16 by @​vseanreesermsft in #​61283
• [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in #​61260
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​61281
• [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in #​61216
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60901
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in #​60926
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61404
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​61398
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61411
• Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @​wtgodbe in #​60352
• [release/8.0] Fix preserving messages for stateful reconnect with backplane by @​BrennanConroy in #​61375
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in #​61442
• fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in #​61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

v8.0.15: .NET 8.0.15

Release

What's Changed

• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60355
• Update branding to 8.0.15 by @​vseanreesermsft in #​60784
• Add partitioned to cookie for SignalR browser testing by @​BrennanConroy in #​60728
• [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in #​60677
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

v8.0.14: .NET 8.0.14

Release

What's Changed

• Update branding to 8.0.14 by @​vseanreesermsft in #​60197
• [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @​dependabot in #​60150
• [release/8.0] Fix java discovery in IdentityModel pipeline by @​wtgodbe in #​60075
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​60199
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in #​59922
• [release/8.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in #​60203
• [release/8.0] Update to MacOS 15 in Helix by @​github-actions in #​60239
• [release/8.0] Use the latest available JDK by @​wtgodbe in #​60233
• [release/8.0] Fix skip condition for java tests by @​github-actions in #​60243
• [release/8.0] Update list of helix queues to skip by @​wtgodbe in #​60231
• [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @​github-actions in #​57288
• [release/8.0] Update remnants of azureedge.net by @​sebastienros in #​60264
• [release/8.0] Centralize on one docker container by @​wtgodbe in #​60299
• Revert "[release/8.0] Update remnants of azureedge.net" by @​wtgodbe in #​60324
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

v8.0.13: .NET 8.0.13

Release

What's Changed

• [release/8.0] Update dotnetbuilds CDN to new endpoint by @​mmitche in #​59575
• Update branding to 8.0.13 by @​vseanreesermsft in #​59756
• [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @​wtgodbe in #​59295
• [release/8.0] Update OSX helix queue by @​github-actions in #​59742
• [release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @​dependabot in #​59678
• [release/8.0] Skip tests on internal queues too by @​github-actions in #​59579
• [release/8.0] Fix Kestrel host header mismatch handling when port in Url by @​BrennanConroy in #​59403
• Migrate off of Debian 11 by @​v-firzha in #​59584
• [release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @​wtgodbe in [#​59777](https://redirect.github.com/dotnet/aspnetcore/pull

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.