Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 31, 2025

Updated Aspire.Hosting.AppHost from 9.3.1 to 9.4.0.

Release notes

Sourced from Aspire.Hosting.AppHost's releases.

9.4.0

We are excited to share that our 9.4.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://learn.microsoft.com/en-us/dotnet/aspire/whats-new/dotnet-aspire-9.4 to find what's new in 9.4.0!

What's Changed

9.3.2

What's Changed

Full Changelog: dotnet/aspire@v9.3.1...v9.3.2

Commits viewable in compare view.

Updated Aspire.Hosting.PostgreSQL from 9.3.1 to 9.4.0.

Release notes

Sourced from Aspire.Hosting.PostgreSQL's releases.

9.4.0

We are excited to share that our 9.4.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://learn.microsoft.com/en-us/dotnet/aspire/whats-new/dotnet-aspire-9.4 to find what's new in 9.4.0!

What's Changed

9.3.2

What's Changed

Full Changelog: dotnet/aspire@v9.3.1...v9.3.2

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.6 to 9.0.7.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 9.0.6 to 9.0.7.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 9.0.6 to 9.0.7.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 9.6.0 to 9.7.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

9.7.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 9.0.6 to 9.0.7.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 9.3.1 to 9.4.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

9.4.0

We are excited to share that our 9.4.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://learn.microsoft.com/en-us/dotnet/aspire/whats-new/dotnet-aspire-9.4 to find what's new in 9.4.0!

What's Changed

9.3.2

What's Changed

Full Changelog: dotnet/aspire@v9.3.1...v9.3.2

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.12.0.118525 to 10.15.0.120848.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.15

False Positive

  • NET-2198 - Fix S1905 FP: Cast of default! expression is required
  • NET-2197 - Fix S1905 FP: stackalloc and Span conversions
  • NET-1641 - Fix S1905 FP: casting IEnumerable<string?> to IEnumerable<string>
  • NET-2157 - Fix S2589 FP: Don't raise an issue after a delegate is invoked
  • NET-2073 - Fix S2699 FP: Add support for FsCheck property tests
  • NET-1537 - Fix S6964 FP: Don't raise on properties annotated with the BindRequiredAttribute

Improvement

  • NET-2112 - Consider ExplodedNodes relevant if a successor would be relevant
  • NET-2183 - SE: Set constraint on operation when learning from IsPattern

False Negative

  • NET-429 - Fix S4275 FN: Support partial properties

Task

  • NET-2208 - Update RSpec before release

10.14

Hey everyone,

This release mostly focuses on mitigating (NET-2196) a performance regression that was introduced in 10.13.

Improvement

  • NET-2196 - Fix path algorithm for execution flows to mitigate performance regression
  • NET-2177 - Improve how the Symbolic Execution engine handles exception paths
  • NET-2135 - Support xUnit V3
  • NET-2163 - Provide Interface for other plugins to add rules to VB.NET SonarWay profile

False Negative

  • NET-235 - Fix S2053: Adjust required salt length to be 32 bytes

Task

  • NET-2170 - Update RSPEC before 10.14 release

10.13

Hello everyone,

In this release, we've focused on:

  • False positive fixes
  • Enhancing S2259's secondary locations to provide clearer, step-by-step explanations of null pointer dereferences issues.

False Positives

  • NET-2099 - Fix S3885 FP: Do not raise in ResolutionEventHandler
  • NET-2023 - Fix S3257 FP: Array with target-typed new
  • NET-1646 - Fix S3267 FP: Loops should be simplified with LINQ expressions
  • NET-1588 - Fix S1066 FP: Combination of dynamic and out should not raise
  • NET-882 - Fix S3257 FP: Don't raise for C# 10 and later when there's explicit delegate creation

Improvements

  • NET-2095 - Improve incremental PR analysis path detection
  • SE: S2259 - Improve secondary locations

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.1 to 3.1.3.

Release notes

Sourced from xunit.runner.visualstudio's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps Aspire.Hosting.AppHost from 9.3.1 to 9.4.0
Bumps Aspire.Hosting.PostgreSQL from 9.3.1 to 9.4.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.6 to 9.0.7
Bumps Microsoft.EntityFrameworkCore from 9.0.6 to 9.0.7
Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 9.0.6 to 9.0.7
Bumps Microsoft.Extensions.Http.Resilience from 9.6.0 to 9.7.0
Bumps Microsoft.Extensions.Logging.Abstractions from 9.0.6 to 9.0.7
Bumps Microsoft.Extensions.ServiceDiscovery from 9.3.1 to 9.4.0
Bumps SonarAnalyzer.CSharp from 10.12.0.118525 to 10.15.0.120848
Bumps xunit.runner.visualstudio from 3.1.1 to 3.1.3

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Aspire.Hosting.PostgreSQL
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.15.0.120848
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 31, 2025
Copy link
Author

dependabot bot commented on behalf of github Aug 5, 2025

Superseded by #2.

@dependabot dependabot bot closed this Aug 5, 2025
@dependabot dependabot bot deleted the dependabot/nuget/multi-ca36899bd3 branch August 5, 2025 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants