Skip to content

Bump the dotnet-dependencies group with 15 updates#458

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/automation/dotnet/dotnet-dependencies-dd71322dd6
Open

Bump the dotnet-dependencies group with 15 updates#458
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/automation/dotnet/dotnet-dependencies-dd71322dd6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Updated coverlet.collector from 8.0.1 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

Commits viewable in compare view.

Updated Dapper from 2.1.72 to 2.1.79.

Release notes

Sourced from Dapper's releases.

2.1.79

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.72...2.1.79

Commits viewable in compare view.

Updated ErrorOr from 2.1.0 to 2.1.1.

Release notes

Sourced from ErrorOr's releases.

2.1.1

new Release with many new features:

  • Some minor Fixes
  • Support for .NET 8 was added
  • Support for .NET 10 was added
  • Added missing async versions of FailIf methods
  • Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder
  • Added ElseDo and ElseDoAsync methods
  • Added Else/ElseAsync overloads returning ErrorOr
  • Added Else/ElseAsync overloads returning ErrorOr
  • Added ToErrorOrAsync method
  • Added missing ErrorOrFactory.From methods
  • Added missing collection expression support
  • Added FromAsync and missing ToErrorOrAsync methods
  • Added ThenEnsure and ThenEnsureAsync methods
  • Added IsSuccess property to ErrorOr

Commits viewable in compare view.

Updated FluentAssertions from 8.9.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.6 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.6.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Updated Polly from 8.6.6 to 8.7.0.

Release notes

Sourced from Polly's releases.

8.7.0

Highlights

What's Changed

New Contributors

Full Changelog: App-vNext/Polly@8.6.6...8.7.0

Commits viewable in compare view.

Updated Refit from 10.1.6 to 11.0.1.

Release notes

Sourced from Refit's releases.

11.0.1

🗞️ What's Changed

🧹 General Changes

  • reactiveui/refit@​484edf6e67310493766b9e4010793bdeaacfb1d7 build: default examples to IsPackable=false @​glennawatson

📌 Other

  • reactiveui/refit@​8652c5e7ac8189dc85aa3748dca1808b3c3c825d Proposal to fix 2115 (#​2116) @​xIceFox

🔗 Full Changelog: reactiveui/refit@v11.0.0...11.0.1

🙌 Contributions

🌱 New contributors since the last release: @​xIceFox
💖 Thanks to all the contributors: @​glennawatson, @​xIceFox

11.0.0

⚠️ This is a breaking release (major: 10.x → 11.0.0)

11.0.0 reworks Refit's error/exception model and tightens interface validation. Most apps will compile, but code that inspects ApiResponse.Error, reads StatusCode, or catches transport exceptions around Refit calls will need changes. These are the same breaking changes that briefly shipped in the now‑delisted 10.1.7 and were reported by the community in #​2114.

💡 Need a drop‑in, non‑breaking replacement for 10.1.6? Use 10.2.0 — it is 10.1.6 re‑signed with a valid certificate (the 10.1.6 cert was revoked, see #​2114). Move to 11.0.0 when you're ready to adopt the changes below.

💥 What changed & how to migrate

1. ApiResponse<T>.Error is now ApiExceptionBase? (was ApiException?) (#​2052)
A new abstract base ApiExceptionBase now sits under both ApiException and the new ApiRequestException. ApiExceptionBase does not expose Content / HasContent — those still live on ApiException.

// before
string? body = response.Error?.Content;

// after — narrow to ApiException first
if (response.Error is ApiException apiEx)
{
    string? body = apiEx.Content;   // Content/HasContent are on ApiException
}

2. New ApiRequestException wraps transport/connection failures (#​2052)
Exceptions thrown by HttpClient.SendAsync before a response arrives — HttpRequestException (DNS/host unreachable), TaskCanceledException (timeouts), etc. — are now wrapped in ApiRequestException : ApiExceptionBase, carrying the full request context. For ApiResponse<T> return types these are now surfaced via .Error instead of only being thrown, so you no longer need a separate try/catch and IsSuccessful check.

// catching transport errors: catch the base (or ApiRequestException) now
catch (ApiExceptionBase ex) { /* covers ApiException + ApiRequestException */ }

3. ApiResponse<T>.StatusCode is now nullable (HttpStatusCode?) (#​2052)
When the request never reached the server there is no status code. Code that assumed a non‑null value must handle null:

int code = (int)response.StatusCode;          // ❌ won't compile / may throw
int? code = (int?)response.StatusCode;         // ✅ handle the no-response case

4. Stricter interface validation + enum name handling (#​2068)
Synchronous return types are now only permitted for generated/non‑public interface members (RestMethodInfo enforces the rule), and the System.Text.Json enum converter now maps serialized names both ways (including JsonStringEnumMemberName on .NET 9+). Interfaces that previously relied on unsupported sync members may now fail generation.

🗞️ What's Changed

✨ Features & Enhancements

  • Create ApiRequestException for wrapping SendAsync exceptions (new error model) by @​PressXtoChris in #​2052
  • Support sync interface members & enum names by @​ChrisPulman in #​2068
  • Add AddRefitClient overloads and tests by @​ChrisPulman in #​2084

... (truncated)

10.2.0

NOTE

This is a re-release of v10.1.6 which had a certificate revoked.

🗞️ What's Changed

🐛 Fixes

  • reactiveui/refit@​cfe6862f468ce793fd5d5557ff47554de800a198 Fixes examples, issues 2058, 1761, 1889, and 2056 (#​2061) @​ChrisPulman
  • reactiveui/refit@​71e7a32b8c0fd428ae29949b45bf13f4d17bc2b7 Fix is packable (#​2063) @​ChrisPulman

🧹 General Changes

  • reactiveui/refit@​c945712afe664c07babcb1193e9f68ec20e48eb4 Update AoT, Add Roslyn 5.0, Update serialisation (#​2062) @​ChrisPulman

📦 Dependencies

  • reactiveui/refit@​d3b9f6eb2242728b1577489781d9b1ac9e41ceaf chore(deps): update .net test stack (#​2054) @​ChrisPulman @​renovate[bot]
  • reactiveui/refit@​804eb41f61b200c02765c7a0b63f4ddfe9164528 chore(deps): update .net test stack to v8 (#​2057) @​renovate[bot]

📌 Other

  • reactiveui/refit@​14811e0b27178a9b3da3b5d4bdda1e9cd8ea33fd Enhance release workflow with new jobs and permissions @​ChrisPulman
  • reactiveui/refit@​49858e348e9444b82735068c15919c3f31942bf4 Bump version from 10.0 to 10.1 @​ChrisPulman
  • reactiveui/refit@​2f43b67c0a78b76c048931dede5f671625b807a0 Remove productNamespacePrefix from release workflow @​ChrisPulman

🔗 Full Changelog: reactiveui/refit@10.0.1...10.1.6

🙌 Contributions

💖 Thanks to all the contributors: @​ChrisPulman

🤖 Automated services that contributed: @​renovate[bot]

Commits viewable in compare view.

Updated Scriban from 7.1.0 to 7.2.4.

Release notes

Sourced from Scriban's releases.

7.2.4

Changes

🐛 Bug Fixes

  • Fix build warning (4ca0455a)

🧰 Misc

  • Clarify URL escaping semantics (99cc7c61)

Full Changelog: 7.2.3...7.2.4

Published with dotnet-releaser

7.2.3

Changes

🧰 Misc

  • Document safe include file loading (34d1cd12)
  • Restrict reflected writes to public setters (c7377a60)

Full Changelog: 7.2.2...7.2.3

Published with dotnet-releaser

7.2.2

Changes

🐛 Bug Fixes

  • Fix parametric function variable scope (#​676) (54b781ec)

🧰 Misc

  • Clarify variable scope documentation (390db7ff)
  • Clarify MemberFilter sandbox limitations (29294e1b)

Full Changelog: 7.2.1...7.2.2

Published with dotnet-releaser

7.2.1

Changes

🧰 Misc

  • Limit array multiplication growth (205ca6a7)
  • Stop parsing at expression depth limit (8fdbd687)
  • Document member filters as reflection-only (d45f7f03)

Full Changelog: 7.2.0...7.2.1

Published with dotnet-releaser

7.2.0

Changes

🐛 Bug Fixes

  • Fix readme with source embedding (#​671) (c8094b09)

🧰 Misc

  • Merge commit from fork (7fdf19df)

Full Changelog: 7.1.0...7.2.0

Published with dotnet-releaser

Commits viewable in compare view.

Updated Testcontainers from 4.11.0 to 4.12.0.

Release notes

Sourced from Testcontainers's releases.

4.12.0

What's Changed

Thanks to all contributors 👏.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

⚠️ Breaking Changes

  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

🚀 Features

  • feat: Add Floci module (#​1690) @​object
  • feat: Ignore port-forwarding extra host in reuse hash (#​1689) @​HofmeisterAn
  • feat: Allow devs to override the reuse hash calculation (#​1688) @​HofmeisterAn
  • feat: Add connect to network API (#​1672) @​HofmeisterAn
  • feat(LocalStack): Require auth token for 4.15 and onwards (#​1667) @​HofmeisterAn
  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Trim tar record padding to avoid broken-pipe failure on Podman (#​1684) @​artiomchi
  • fix(Nats): Use healthz API for readiness probe (#​1679) @​eriblo01
  • fix: Remove KeepAlive socket option (#​1671) @​Angelinsky7

📖 Documentation

  • docs: Extend WithCommand(params string[]) documentation (#​1685) @​HofmeisterAn

🧹 Housekeeping

  • feat: Prepare next release cycle (4.12.0) (#​1664) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump the actions group with 5 updates (#​1687) @dependabot[bot]
  • chore(deps): Bump Docker.DotNet from 4.1.0 to 4.2.0 (#​1686) @​HofmeisterAn
  • chore(deps): Bump the actions group with 5 updates (#​1676) @dependabot[bot]
  • chore(deps): Bump Docker.DotNet from 4.0.2 to 4.1.0 (#​1674) @​HofmeisterAn
  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet-dependencies group with 15 updates
a97ad6a 
Bumps coverlet.collector from 8.0.1 to 10.0.1
Bumps Dapper from 2.1.72 to 2.1.79
Bumps ErrorOr from 2.1.0 to 2.1.1
Bumps FluentAssertions from 8.9.0 to 8.10.0
Bumps Microsoft.Data.Sqlite from 10.0.6 to 10.0.9
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.6 to 10.0.9
Bumps Microsoft.Extensions.DependencyInjection from 10.0.6 to 10.0.9
Bumps Microsoft.Extensions.Hosting from 10.0.6 to 10.0.9
Bumps Microsoft.Extensions.Http from 10.0.6 to 10.0.9
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.6 to 10.0.9
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.6.0
Bumps Polly from 8.6.6 to 8.7.0
Bumps Refit from 10.1.6 to 11.0.1
Bumps Scriban from 7.1.0 to 7.2.4
Bumps Testcontainers from 4.11.0 to 4.12.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Dapper
  dependency-version: 2.1.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: ErrorOr
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Polly
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Refit
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Scriban
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Testcontainers
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, dotnet. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jun 10, 2026

Copy link
Copy Markdown

PR Governance Check

Required fixes

  • PR title must follow Conventional Commits, for example: feat(contentops): add CI checks

Advisory notices

  • ContentOps files changed without a CHANGELOG update. Add an entry if this change affects behaviour or release notes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants