Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Bump FluentAssertions and 21 others#3119

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/src/dev/minor-and-patch-ccfe554e52
Closed

Bump FluentAssertions and 21 others#3119
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/src/dev/minor-and-patch-ccfe554e52

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Updated FluentAssertions from 6.12.0 to 6.12.2.

Release notes

Sourced from FluentAssertions's releases.

6.12.2

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@6.12.1...6.12.2

6.12.1

What's Changed

Improvements

  • Improve BeEmpty() and BeNullOrEmpty() performance for IEnumerable<T>, by materializing only the first item - #​2530

Fixes

  • Fixed formatting error when checking nullable DateTimeOffset with BeWithin(...).Before(...) - #​2312
  • BeEquivalentTo will now find and can map subject properties that are implemented through an explicitly-implemented interface - #​2152
  • Fixed that the because and becauseArgs were not passed down the equivalency tree - #​2318
  • BeEquivalentTo can again compare a non-generic IDictionary with a generic one - #​2358
  • Fixed that the FormattingOptions were not respected in inner AssertionScope - #​2329
  • Capitalize true and false in failure messages and make them formattable to a custom BooleanFormatter - #​2390, #​2393
  • Improved the failure message for NotBeOfType when wrapped in an AssertionScope and the subject is null - #​2399
  • Improved the failure message for BeWritable/BeReadable when wrapped in an AssertionScope and the subject is read-only/write-only - #​2399
  • Improved the failure message for ThrowExactly[Async] when wrapped in an AssertionScope and no exception is thrown - #​2398
  • Improved the failure message for [Not]HaveExplicitProperty when wrapped in an AssertionScope and not implementing the interface - #​2403
  • Improved the failure message for [Not]HaveExplicitMethod when wrapped in an AssertionScope and not implementing the interface - #​2403
  • Changed BeEquivalentTo to exclude private protected members from the comparison - #​2417
  • Fixed using BeEquivalentTo on an empty ArraySegment - #​2445, #​2511
  • BeEquivalentTo with a custom comparer can now handle null values - #​2489
  • Ensured that nested calls to AssertionScope(context) create a chained context - #​2607
  • One overload of the AssertionScope constructor would not create an actual scope associated with the thread - #​2607
  • Fixed ThrowWithinAsync not respecting OperationCanceledException - #​2614
  • Fixed using BeEquivalentTo with an IEqualityComparer targeting nullable types - #​2648

Full Changelog: fluentassertions/fluentassertions@6.12.0...6.12.1

Commits viewable in compare view.

Updated JsonSchema.Net from 9.2.1 to 9.2.2.

Release notes

Sourced from JsonSchema.Net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 5.2.2 to 5.2.3.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

5.2.3

This update brings the following changes since the 5.2.2 release:

Fixed

  • Fixed possible NullPointerException during socket receive (PR #​3284)
  • Fixed inconsistencies between source and reference projects (PR #​3124)
  • Adjusted retry logic to allow errors with negative numbers to be considered transient (PR #​3185)

Changed

Commits viewable in compare view.

Pinned Microsoft.Diagnostics.Tracing.TraceEvent at 3.2.4.

Release notes

Sourced from Microsoft.Diagnostics.Tracing.TraceEvent's releases.

3.2.4

Security

This release contains security hardening fixes for a number of malformed-input parsing and path-traversal vulnerabilities:

  • Bounds-checking for malformed event payloads in the BPerf ULZ777 decompressor and event-record parser
  • Bounds-checking for malformed metadata in the GCDynamic, RegisteredTraceEventParser (TDH), Dynamic, and EventPipe V3 parsers
  • Bounds-checking for malformed PE CodeView and Resource directory entries
  • Path containment hardening for PDB extraction (zipped ETL + container PDBs), DiagSession resource extraction, R2R perf map writes, PdbScope module paths, and dynamic manifest writes
  • Path-traversal and command-execution hardening for Source Server lookups

What's Changed

Full Changelog: microsoft/perfview@v3.2.3...v3.2.4

3.2.3

What's Changed

New Contributors

Full Changelog: microsoft/perfview@v3.2.2...v3.2.3

3.2.2

What's Changed

Full Changelog: microsoft/perfview@v3.2.1...v3.2.2

3.2.1

Native and R2R Symbol Download and Parsing Now Available

As of this release, if you capture a trace using dotnet-trace collect-linux or record-trace, native and R2R symbols can now be downloaded and resolved at analysis time. All .NET symbols (both native and R2R) are available on the Microsoft Symbol Server. Additionally, many Azure Linux symbol files are available on the Microsoft Symbol Server. For those targeting other distros, PerfView and TraceEvent are capable of pulling those symbol files from local directories by adding a local symbol path pointing to the files.

Most of the work for this was completed in PerfView and TraceEvent 3.2.1 with the final required fixes present in this release.

What's Changed

Full Changelog: microsoft/perfview@v3.2.0...v3.2.1

3.2.0

What's Changed

New Contributors

Full Changelog: microsoft/perfview@v3.1.30...v3.2.0

3.1.30

What's Changed

New Contributors

Full Changelog: microsoft/perfview@v3.1.29...v3.1.30

3.1.29

What's Changed

Full Changelog: microsoft/perfview@v3.1.28...v3.1.29

3.1.28

What's Changed

Full Changelog: microsoft/perfview@v3.1.26...v3.1.28

3.1.26

Roll-up through 2025/10/10.

  • Only dispose non-null handles in ETWTraceEventSource #​2291
  • Small cleanup in NettraceUniversalConverter #​2292
  • Fix hyperlink focus visibility in dark mode and improve keyboard navigation #​2295
  • Gracefully handle invalid characters in PATH #​2296
  • Fix copying First/Last columns with pipe symbols to work in time range input #​2304

3.1.24

Roll-up through 2025/08/26.

  • Implement NuGet Central Package Version Management [#​2262]
  • Fix broken stacks warning for universal traces [#​2268]
  • Fix jitted code symbols in universal traces to show assembly names instead of memfd:doublemapper [#​2269]
  • Use themed background brush for menu and filter [#​2272]
  • Improve rendering and dark mode [#​2274]
  • Implement configurable symbol server authentication with /SymbolsAuth command line argument for PerfView and HeapDump [#​2278]
  • Add a themed dialog [#​2276]
  • Fix regression: "Goto Item in Callers/Callees" now accumulates across all threads [#​2284]
  • Fix parsing issues and add support for additional events to the Linux perf text file parser [#​2286]
  • Fix TraceLog live session RelatedActivityID/ContainerID corruption by preserving ExtendedData [#​2285]
  • NetTrace LabelList metadata overrides and metadata flushing [#​2281]
  • Fix NullReferenceException in ProviderBrowser.LevelSelected when deselecting level [#​2289]

3.1.23

Roll-up through 2025/07/11.

  • Fixed TraceEvent CaptureState API to support previously unsupported keyword configurations. [#​2222]
  • Added Exception Stacks view for .nettrace files to enhance exception diagnostics. [#​2223]
  • Corrected outdated documentation references to "GC Heap Alloc Stacks". [#​2224]
  • Fixed off-by-one error in P/Invoke buffer handling for Windows volume events. [#​2227]
  • Fixed broken links in the PerfView user guide. [#​2225]
  • Improved error handling by throwing when TdhEnumerateProviders fails, enabling better diagnostics. [#​2177]
  • Added AutomationProperties.Name to the Process Selection DataGrid for improved accessibility. [#​2239]
  • Fixed focus indicator visibility for hyperlinks in dark mode and high contrast themes. [#​2235]
  • Addressed NullReferenceException in Anti-Malware view. [#​2233]
  • Fixed WebView2 crash on close by implementing proper disposal pattern. [#​2230]
  • Added support for native AOT gcdumps, expanding compatibility with modern .NET workloads. [#​2242]
  • Fixed NVDA screen reader issue where Theme menu items did not announce selection state. [#​2237]
  • Extended PredefinedDynamicTraceEventParser to support dynamic events from additional sources. [#​2232]
  • Implemented MSFZ symbol format support in SymbolReader. [#​2244]
  • Removed usage of DefaultAzureCredential, simplifying authentication dependencies. [#​2255]
  • Added option to hide TimeStamp columns in the EventWindow View menu. [#​2247]
  • Fixed NVDA screen reader reporting incorrect list count for File menu separators. [#​2257]
  • Fixed unhandled exception when double-clicking in scroll bar area with no content. [#​2254]
  • Fixed universal symbol conversion for overlapping mappings. [#​2252]
  • Fixed TraceEvent.props to respect ProcessorArchitecture when RuntimeIdentifier is set. [#​2249]

3.1.22

Roll-up through 2025/06/04.

  • Added GC Heap Analyzer support for .nettrace files to enhance memory analysis workflows. [#​2216]
  • Introduced PredefinedDynamicTraceEventParser for known TraceLogging events, improving trace event parsing. [#​2220]
  • Enabled selection of process trees in the process selection dialog for multi-process analysis, allowing deeper inspection across related processes. [#​2195]
  • Implemented sorting for the Duration column in the process selection dialog using TotalDurationSeconds, improving usability. [#​2194]
  • Improved NetTrace parameter parsing for better command-line flexibility. [#​2200]
  • Fixed GetActiveSessionNames to handle ERROR_MORE_DATA, resolving session enumeration issues. [#​2196]
  • Fixed ObjectDisposedException when opening Net OS Heap Alloc Stacks, improving stability. [#​2212]
  • Fixed null reference exception in GenFragmentationPercent method, enhancing reliability. [#​2211]
  • Fixed TreeView auto-expansion when opening trace files. [#​2218]
  • Fixed StackViewer issue where "Set Time Range" reset "Goto Items by callees". [#​2208]
  • Fixed markdown table formatting when copying from the stack viewer. [#​2203]
  • Fixed TraceEvent NuGet package to exclude Windows-specific native DLLs. [#​2215]
  • Removed PDB generation for .NET Core assemblies using CrossGen, reducing build overhead. [#​2202]
  • Made symbol server timeout configurable and removed dead code in SymbolReader. [#​2209]
  • Changed help ribbons to use textblocks, enabling tab navigation. [#​2201]

3.1.21

Roll-up through 2025/05/02.

  • Change NetTrace format version support
  • Add /OSHeapMaxMB to set a max size for OS heap sessions
  • Implement Nettrace Support for Traces with Universal Providers
  • Implement R2R Symbol Lookup for Linux Traces
  • Fix NetTrace parsing for Start/Stop event names
  • Fix IndexOutOfRangeException in ProcessGlobalHistory

3.1.20

Roll-up through 2025/04/01.

  • Flamegraph and drill-in menu improvements
  • Performance improvements around unhandled event dispatch
  • Add configurable real-time delay in TraceLogEventSource
  • Don't queue another flush during a real-time ETW session if one is already in-process
  • Allow configuration of rundown providers for real-time EventPipe sessions
  • Fix stack handling for NetTrace V4
  • Add multi-line view for events viewer
  • Misc accessibility fixes

3.1.19

Roll-up through 2025/01/30.

  • Added missing time information in the Raw XML View for GCStats.
  • Updated activity computation logic to support OpenTelemetry events.
  • Changed timestamp values to use QPC time based on UTC for Relogger.
  • Fixed issues with report command handling.
  • Addressed various POH-related issues.
  • Implemented file-size limitation for rundown using an ETW-based approach.

3.1.18

Roll-up through 2024/12/11.

3.1.17

Roll-up through 2024/11/08.

  • Numerous accessibility fixes to PerfView. This includes switching out the previous web browser plugin to use WebView2.
  • Breaking changes to FastSerialization to ensure that only expected types are deserialized. This addresses potential vulnerabilities during deserialization of untrusted input. Details at Breaking Changes for FastSerialization perfview#2121.

3.1.16

Roll-up through 2024/10/11.

  • Performance improvements to DynamicParser.
  • Fixed GetFileNameWithoutExtensionNoIllegalChars to only trim known file extensions.
  • Fixed a memory leak when processing EventPipe traces.
  • Added support for private/in-process loggers.

3.1.15

  • Fixed an issue where /buildLayout resulted in an error when the user hadn't previously run PerfView on the machine.

3.1.14

Roll-up through 2024/08/26.

  • Added missing Microsoft.Diagnostics.NETCore.Client dependency to the TraceEvent.
  • ETWClrProfiler compiled with /QSpectre.
  • Added /buildLayout <path> to PerfView. This allows users to build a self-contained fully-extracted version of PerfView that doesn't depend on %appdata%. This is useful for certain deployment mechanisms where the deployed PerfView shouldn't impact PerfView in %appdata%.

3.1.13

Roll-up through 2024/07/15.

  • Update to ClrMD 4 with support for https://symweb.azurefd.net.
  • Live session support for EventPipe.
  • GC dynamic event support.
  • PerfView now opens external links in the user's default browser instead of within the app's browser.
  • Fixes an issue with LinuxPerfScriptProcessNameBuilder when using ParallelLinuxPerfScriptStackSource.

3.1.12

Roll-up through 2024/06/13.

  • Build updates to support authentication to symbol servers in TraceEvent.

3.1.11

Roll-up through 2024/06/10.

  • Add support to PerfView for interactive authentication to the new Symweb.
  • Disable rundown for .NET 2.0 by default. Can be re-enabled via /NoV2Rundown:false.
  • Fix /GCTriggeredStacks command line argument to enable rundown so that stacks are properly captured.
  • Update TraceEvent project/Nuget package to remove unnecessary PackageReference elements since the update to netstandard2.0.
  • Fix Contention Stacks view to function properly for .NET Framework and older .NET Core processes.

3.1.10

Roll-up through 2024/05/02.

  • New stack views for contention and waithandle events.
  • New ASP.NET Core Stats view.
  • Events view now displays an absolute timestamp in addition to relative.
  • GC API fixes.
  • NuGet package dependency fixes.
  • Fix to avoid overflow of /RundownMaxMB.

3.1.9

Roll-up through 2024/03/07.

  • Provide an option in PerfView to enable/disable truncation of the full raw event in the Events view when selecting “Dump raw event”.
  • Fix the TraceEvent nuspec file to include all dependencies.
  • Trim whitespace when parsing /Providers.
  • Fix live session decoding of self-describing events.

3.1.8

Roll-up through 2024/01/31.

  • Ensure PerfView.exe exits after closing the main window.
  • Add ETWTraceEventSource.DispatchBehavior to control whether the TaskID is fetched from the event header, or consumed from the hardcoded value in the parser. Used for scenarios where the TaskID is modified by a trace processing tool or when the TaskID otherwise varies.
  • Fix surfacing of RelatedActivityID in real-time sessions.
  • Stabilize root names for heap snapshots.

3.1.7

Roll-up through 2023/12/05.

  • Properly setting the process.Log to be used by the GC to discern whether the process is running with SVR GC Threads
  • Fix CTF structure alignment issue
  • Show Object Size in for GCAllocationTick Events in Any Stacks
  • Implementation of GC Dynamic Events
  • Capture the Process Name from EventPipe Traces
  • Fixes for Process Dump to GC Dump Conversion

3.1.6

Roll-up through 2023/10/20.

  • Harden TraceEventSession.ProviderNameToGuid
  • Fixed calculation of Alloc MB / Pause Time in GC
  • New version of Microsoft.Diagnostics.Tracing.TraceEvent.SupportFiles
  • Protect Initialization of TraceEventSession Provider Lists

3.1.5

Roll-up through 2023/08/24.

  • Extensibility support for CtfTraceEventSource mappings. This is to enable custom parsers to register events with CtfTraceEventSource which operates off of event provider/name instead of ETW metadata.
  • Fix computation of background GC pause times.

3.1.4

Roll-up through 2023/07/31.

  • Update goto source functionality to display both inclusive and exclusive costs. Previously only inclusive costs were shown.
  • Update LockCreated and ContentionStart_V2 events to allow for tracking of lock creation and acquisition of locks by thread.
  • Support for uncompressed embedded source files in PDBs.
  • Support for basic authentication when authenticating to symbol servers.
  • Improvements to the Events view to launch maximized and to increase the number of allowed columns.
  • Various security improvements including building with banned.h (avoid usage of unsafe native APIs), enabling additional binary hardening settings, and switching to secure random number generation.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Configuration.EnvironmentVariables at 3.1.32.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

3.1.32

Release

3.1.31

Release

3.1.30

Release

3.1.29

3.1.28

Release

3.1.27

Release

3.1.26

Release

3.1.25

Release

3.1.24

Release

3.1.22

https://github.com/dotnet/core/releases/tag/v3.1.22

3.1.20

Release

3.1.19

Release

3.1.18

Release

3.1.17

Release

3.1.16

Release

3.1.15

Release

3.1.14

Release

3.1.13

Release

3.1.12

Repos

3.1.11

Repos

3.1.10

Repos

3.1.9

Repos

3.1.8

Repos

3.1.7

Repos

3.1.6

Repos

3.1.5

Repos

3.1.4

Repos

3.1.3

Release Notes
Install Instructions

Repos

Release Notes
Install Instructions

Commits viewable in compare view.

Pinned Microsoft.Extensions.Configuration.Json at 3.1.32.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

3.1.32

Release

3.1.31

Release

3.1.30

Release

3.1.29

3.1.28

Release

3.1.27

Release

3.1.26

Release

3.1.25

Release

3.1.24

Release

3.1.22

https://github.com/dotnet/core/releases/tag/v3.1.22

3.1.20

Release

3.1.19

Release

3.1.18

Release

3.1.17

Release

3.1.16

Release

3.1.15

Release

3.1.14

Release

3.1.13

Release

3.1.12

Repos

3.1.11

Repos

3.1.10

Repos

3.1.9

Repos

3.1.8

Repos

3.1.7

Repos

3.1.6

Repos

3.1.5

Repos

3.1.4

Repos

3.1.3

Release Notes
Install Instructions

Repos

Release Notes
Install Instructions

Commits viewable in compare view.

Updated Microsoft.Extensions.FileSystemGlobbing from 3.1.9 to 3.1.32.

Release notes

Sourced from Microsoft.Extensions.FileSystemGlobbing's releases.

3.1.32

Release

3.1.31

Release

3.1.30

Release

3.1.29

3.1.28

Release

3.1.27

Release

3.1.26

Release

3.1.25

Release

3.1.24

Release

3.1.22

https://github.com/dotnet/core/releases/tag/v3.1.22

3.1.20

Release

3.1.19

Release

3.1.18

Release

3.1.17

Release

3.1.16

Release

3.1.15

Release

3.1.14

Release

3.1.13

Release

3.1.12

Repos

3.1.11

Repos

3.1.10

Repos

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Abstractions at 3.1.32.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

3.1.32

Release

3.1.31

Release

3.1.30

Release

3.1.29

3.1.28

Release

3.1.27

Release

3.1.26

Release

3.1.25

Release

3.1.24

Release

3.1.22

https://github.com/dotnet/core/releases/tag/v3.1.22

3.1.20

Release

3.1.19

Release

3.1.18

Release

3.1.17

Release

3.1.16

Release

3.1.15

Release

3.1.14

Release

3.1.13

Release

3.1.12

Repos

3.1.11

Repos

3.1.10

Repos

3.1.9

Repos

3.1.8

Repos

3.1.7

Repos

3.1.6

Repos

3.1.5

Repos

3.1.4

Repos

3.1.3

Release Notes
Install Instructions

Repos

Release Notes
Install Instructions

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.ApplicationInsights at 2.23.0.

Release notes

Sourced from Microsoft.Extensions.Logging.ApplicationInsights's releases.

2.23.0

  • no changes since beta.

2.23.0-beta1

2.22.0

  • no changes since beta.

2.22.0-beta4

2.22.0-beta3

2.22.0-beta2

2.22.0-beta1

2.21.0

  • no changes since beta.

2.21.0-beta3

2.21.0-beta2

2.21.0-beta1

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Console at 3.1.32.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

3.1.32

Release

3.1.31

Release

3.1.30

Release

3.1.29

3.1.28

Release

3.1.27

Release

3.1.26

Release

3.1.25

Release

3.1.24

Release

3.1.22

https://github.com/dotnet/core/releases/tag/v3.1.22

3.1.20

Release

3.1.19

Release

3.1.18

Release

3.1.17

Release

3.1.16

Release

3.1.15

Release

3.1.14

Release

3.1.13

Release

3.1.12

  • [Release Notes](https...

Description has been truncated

@dependabot
Bump FluentAssertions and 21 others
d0aedbf 
Bumps FluentAssertions from 6.12.0 to 6.12.2
Bumps JsonSchema.Net from 9.2.1 to 9.2.2
Bumps Microsoft.Data.SqlClient from 5.2.2 to 5.2.3
Bumps Microsoft.Diagnostics.Tracing.TraceEvent from 3.1.3 to 3.2.4
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 3.1.2 to 3.1.32
Bumps Microsoft.Extensions.Configuration.Json from 3.1.2 to 3.1.32
Bumps Microsoft.Extensions.FileSystemGlobbing from 3.1.9 to 3.1.32
Bumps Microsoft.Extensions.Logging.Abstractions from 3.1.2 to 3.1.32
Bumps Microsoft.Extensions.Logging.ApplicationInsights from 2.20.0 to 2.23.0
Bumps Microsoft.Extensions.Logging.Console from 3.1.2 to 3.1.32
Bumps Microsoft.Json.Pointer from 2.1.0 to 2.3.0
Bumps Microsoft.Json.Schema from 2.1.0 to 2.3.0
Bumps Microsoft.Json.Schema.Validation from 2.1.0 to 2.3.0
Bumps Microsoft.TeamFoundationServer.Client from 16.170.0 to 16.205.3
Bumps Moq from 4.18.4 to 4.20.72
Bumps Newtonsoft.Json from 13.0.3 to 13.0.4
Bumps System.Collections.Immutable from 5.0.0 to 9.0.8
Bumps System.Composition from 5.0.0 to 5.0.1
Bumps System.Data.SqlClient from 4.8.6 to 4.9.1
Bumps System.Text.Encoding.CodePages to 4.7.1, 6.0.1
Bumps System.Text.Encodings.Web from 6.0.0 to 6.0.1
Bumps YamlDotNet from 11.2.0 to 11.2.1

---
updated-dependencies:
- dependency-name: FluentAssertions
  dependency-version: 6.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: JsonSchema.Net
  dependency-version: 9.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Collections.Immutable
  dependency-version: 9.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Diagnostics.Tracing.TraceEvent
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 3.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 3.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.FileSystemGlobbing
  dependency-version: 3.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 3.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.ApplicationInsights
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 3.1.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Json.Pointer
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Json.Schema
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Json.Schema.Validation
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.TeamFoundationServer.Client
  dependency-version: 16.205.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Moq
  dependency-version: 4.20.72
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Composition
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Data.SqlClient
  dependency-version: 4.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.Text.Encoding.CodePages
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.Text.Encoding.CodePages
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Text.Encodings.Web
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: YamlDotNet
  dependency-version: 11.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 1, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Jul 1, 2026
This was referenced Jul 1, 2026
Closed
Closed
michaelcfanning added a commit that referenced this pull request Jul 1, 2026
@michaelcfanning
Raise .NET Framework floor to net481, adopt full dependency group, re…
f0fc249 
…lease 5.5.0

Retarget the in-solution .NET Framework projects (net461/net462/net48/net472)
to net481 so the four previously-held bumps in the minor-and-patch group can be
adopted, completing the takeover of Dependabot group #3119 (all 22 packages).

net481 is the highest targetable .NET Framework TFM; 4.8.2 is a runtime servicing
update with no distinct TFM or reference-assembly package, and code built for
net481 runs on a 4.8.2 runtime. This satisfies the Microsoft-internal 4.8.2
runtime floor while remaining buildable.

Held bumps now adopted: Microsoft.Diagnostics.Tracing.TraceEvent 3.2.4,
System.Collections.Immutable 9.0.8, System.Reflection.Metadata 9.0.8,
System.Data.SqlClient 4.9.1.

The newer System.* (9.x) packages pull facade assemblies that forward
System.Net.Http / System.IO.Compression types and displace the built-in
framework references, and CsvHelper drags in an older Microsoft.Bcl.HashCode.
Reference the framework facades explicitly and pin Microsoft.Bcl.HashCode 6.0.0
centrally in build.props for .NETFramework targets so the assembly graph unifies.

Also update the packaging framework lists (scripts/Projects.psm1) and the
Multitool nuspec Publish/Signing folder references from net462 to net481.

The net481 floor drops support for consumers on .NET Framework < 4.8.1, a
breaking change; bump the release to 5.5.0 and record the BRK in ReleaseHistory.

Co-authored-by: Copilot <[email protected]>
@michaelcfanning michaelcfanning mentioned this pull request Jul 1, 2026
Merged
@michaelcfanning

michaelcfanning commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Superseded by #3120, which adopts all 22 bumps from this group (including the four held for TFM reasons) plus the required ApplicationInsights obsolete-API migration, and raises the .NET Framework floor to net481. Closing in favor of #3120.

@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/nuget/src/dev/minor-and-patch-ccfe554e52 branch July 1, 2026 17:11
michaelcfanning added a commit that referenced this pull request Jul 1, 2026
@michaelcfanning
Adopt full dependency group + raise .NET Framework floor to net481 (r…
3893c01 
…elease 5.5.0) (#3120)

* Take over Dependabot group #3119 with a descoped, buildable bump set

Dependabot group PR #3119 failed CI: the Microsoft.Extensions.Logging.ApplicationInsights
2.20.0 -> 2.23.0 bump marks the InstrumentationKey-based AddApplicationInsights
overload [Obsolete], and Release builds treat warnings as errors, so
ServiceProviderFactory could no longer compile (this also failed the npm publish job).

Migrate ServiceProviderFactory to the non-obsolete AddApplicationInsights overload
that accepts an Action<TelemetryConfiguration>: prefer an explicit connection string,
and express a legacy instrumentation key as one so both configuration shapes route to
the same ingestion. Update the sample appsettings.json to model ConnectionString.

Adopt 19 of the 22 group bumps (all green under warnings-as-errors, WorkItems tests
pass on net8.0 and net48). Hold four bumps that drag the modern System.* 9.x graph
(Microsoft.Bcl.HashCode 6.0) or drop net461 support, which the repo's legacy target
frameworks cannot absorb without a net461 -> net462+ migration:
  - Microsoft.Diagnostics.Tracing.TraceEvent 3.2.4
  - System.Collections.Immutable 9.0.8
  - System.Reflection.Metadata 9.0.8
  - System.Data.SqlClient 4.9.1

Co-authored-by: Copilot <[email protected]>

* Raise .NET Framework floor to net481, adopt full dependency group, release 5.5.0

Retarget the in-solution .NET Framework projects (net461/net462/net48/net472)
to net481 so the four previously-held bumps in the minor-and-patch group can be
adopted, completing the takeover of Dependabot group #3119 (all 22 packages).

net481 is the highest targetable .NET Framework TFM; 4.8.2 is a runtime servicing
update with no distinct TFM or reference-assembly package, and code built for
net481 runs on a 4.8.2 runtime. This satisfies the Microsoft-internal 4.8.2
runtime floor while remaining buildable.

Held bumps now adopted: Microsoft.Diagnostics.Tracing.TraceEvent 3.2.4,
System.Collections.Immutable 9.0.8, System.Reflection.Metadata 9.0.8,
System.Data.SqlClient 4.9.1.

The newer System.* (9.x) packages pull facade assemblies that forward
System.Net.Http / System.IO.Compression types and displace the built-in
framework references, and CsvHelper drags in an older Microsoft.Bcl.HashCode.
Reference the framework facades explicitly and pin Microsoft.Bcl.HashCode 6.0.0
centrally in build.props for .NETFramework targets so the assembly graph unifies.

Also update the packaging framework lists (scripts/Projects.psm1) and the
Multitool nuspec Publish/Signing folder references from net462 to net481.

The net481 floor drops support for consumers on .NET Framework < 4.8.1, a
breaking change; bump the release to 5.5.0 and record the BRK in ReleaseHistory.

Co-authored-by: Copilot <[email protected]>

* Hold Microsoft.Json.* dependencies at 2.1.0

Microsoft.Json.Schema.Validation 2.3.0 tightens format: uri enforcement,
which surfaces that several SARIF Uri properties (ToolComponent.DownloadUri /
InformationUri, TranslationMetadata's) lack a [JsonConverter(typeof(UriConverter))]
attribute and therefore serialize a raw OriginalString rather than a
percent-encoded URI. This is a genuine latent gap that warrants its own
focused change (take 2.3.0 + add the missing converter attributes), so hold
Microsoft.Json.Pointer / Schema / Schema.Validation at 2.1.0 for this release
and keep the remaining dependency-group bumps and the net481 floor.

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@michaelcfanning michaelcfanning Awaiting requested review from michaelcfanning
@cfaucon cfaucon Awaiting requested review from cfaucon cfaucon is a code owner
@aasim aasim Awaiting requested review from aasim aasim is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@michaelcfanning