Skip to content

build: Bump the nuget group with 23 updates - #97

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-7e40de0dc6
Open

build: Bump the nuget group with 23 updates#97
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-7e40de0dc6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 15, 2026

Copy link
Copy Markdown

Updated dotnet-stryker from 4.16.0 to 5.0.0.

Release notes

Sourced from dotnet-stryker's releases.

5.0.0

5.0.0 (2026-09-11)

Breaking Changes

Bug Fixes

Features

  • Add test information to html/json report for MTP test runner (#​3541) (5d497fa)
  • MTP: Support perTest and perTestInIsolation coverage analysis (#​3752) (0705367)
  • Add --diag option to improve diagnostic when mutated compilation fails (#​3702) (01db9f4)
  • Support solution configuration (#​3751) (b8bc307)
  • timeouts: Calculate timeout values based on actual mutant runtimes (#​3731) (4fa9ee7)

Commits viewable in compare view.

Updated FluentAssertions from 7.2.2 to 8.11.0.

Release notes

Sourced from FluentAssertions's releases.

8.11.0

What's Changed

New features

Improvements

Fixes

Documentation

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.10.0...8.11.0

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

8.9.0

[!WARNING]
For projects targeting .NET 9, you need at least .NET SDK 9.0.200 as earlier versions will trigger compile errors because of invalid overload resolution. See #​3225

What's Changed

New features

Improvements

Fixes

Documentation

Others

8.8.0

What's Changed

New features

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.7.1...8.8.0

8.7.1

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@8.7.0...8.7.1

8.7.0

What's Changed

New features

Others

Full Changelog: fluentassertions/fluentassertions@8.6.0...8.7.0

8.6.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.5.0...8.6.0

8.5.0

What's Changed

New features

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.4.0...8.5.0

8.4.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.3.0...8.4.0

8.3.0

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.2.0...8.3.0

8.2.0

What's Changed

Improvements

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.1.1...8.2.0

8.1.1

What's Changed

Fixes

Full Changelog: fluentassertions/fluentassertions@8.1.0...8.1.1

8.1.0

What's Changed

Improvements

Fixes

Documentation

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.0.1...8.1.0

8.0.1

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.0.0...8.0.1

8.0.0

What's Changed

License change

Breaking Changes

New features

Improvements

8.0.0-rc.2

What's Changed

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.0.0-rc.1...8.0.0-rc.2

8.0.0-rc.1

What's Changed

Breaking Changes

Fixes

Documentation

Others

8.0.0-alpha.1

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@7.0.0-alpha.6...8.0.0-alpha.1

Commits viewable in compare view.

Updated FluentValidation from 12.1.1 to 12.2.0.

Release notes

Sourced from FluentValidation's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

  • Add Lithuanian language (#​2350)
  • Add Belarusian language (#​2356)
  • Add GetParentChain() to PropertyChain (#​2358)
  • Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#​2362)
  • Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#​2370)
  • Change EnumValidator to work under native AOT (#​2371)
  • Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#​2372)
  • Fix PropertyPath is incorrect in .When() on RuleForEach (#​2363)

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.Analyzers from 3.11.0 to 5.9.0.

Release notes

Sourced from Microsoft.CodeAnalysis.Analyzers's releases.

5.0.4

Release

5.0.2

Release Notes
Install Instructions

Repos

5.0.1

Release Notes
Install Instructions

Repo

4.2.0-4.22266.5

Release

4.2.0-3.22151.16

Release

4.2.0-1.22108.11

Release

4.0.0-2.21354.7

Release

4.0.0-2.21254.26

Release

4.0.0-1.21277.15

Release

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.CSharp from 4.14.0 to 5.12.0.

Updated Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Primitives from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Primitives's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.0 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

18.10.2

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.10.0 and 18.10.1.
Fixed in: Microsoft.TestPlatform.CLI 18.10.2.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: microsoft/vstest#16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See microsoft/vstest#16652

What's Changed

Full Changelog: microsoft/vstest@v18.10.1...v18.10.2

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.401 to 10.0.403.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.403

You can build .NET 10.0 from the repository by cloning the release tag v10.0.403 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.402

You can build .NET 10.0 from the repository by cloning the release tag v10.0.402 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.4.0 to 2.5.0.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Testing.Platform from 2.4.0 to 2.5.2.

Release notes

Sourced from Microsoft.Testing.Platform's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polyfill from 11.3.0 to 11.4.5.

Release notes

Sourced from Polyfill's releases.

11.4.5

  • #​680 Avoid per-read char[] allocation in StringStream on older targets
  • #​681 Insert spans into List with a single shift
  • #​682 Scan for line breaks in a single pass in SpanLineEnumerator
  • #​683 Encode Base64Url without intermediate strings and arrays
  • #​684 Override WriteByte in WritableMemoryStream
  • #​685 Block copy in List AddRange(ReadOnlySpan) and CopyTo(Span)
  • #​686 Avoid quadratic separator search in SplitAny for char separators
  • #​687 Cache the last ReadAsync task in the memory stream polyfills
  • #​688 Use the span based Convert APIs in the Base64 polyfill
  • #​689 Index into IList sources in Take(Range) and TakeLast
  • #​690 Find string separators in a single pass in SplitAny
  • #​691 Defer the Adler-32 modulo in the ZLibStream polyfill
  • #​692 Make the SkipLast polyfill streaming
  • #​693 Grow geometrically in CollectionsMarshal.SetCount
  • #​694 Copy in blocks in StringBuilder.CopyTo(int, Span, int)
  • #​695 Use the runtime's HashSet.TryGetValue when it exists
  • #​696 Port the BCL string algorithm for Path.GetRelativePath
  • #​697 Size the buffers of the Base64 OperationStatus overloads by the data
  • #​698 Only materialize the requested range in StringBuilder.Append(StringBuilder, int, int)
  • #​699 Pre-size the dictionary in ToDictionary(IEnumerable)
  • #​700 Enumerate regex matches lazily in ValueMatchEnumerator
  • #​701 Write File span and memory payloads without copying them
  • #​702 Do not copy the queue in PriorityQueue.Remove when the element is absent
  • #​703 Share one RandomNumberGenerator and draw random bytes in batches
  • #​704 Do not check IsEmpty for every item in ConcurrentBag.Clear
  • #​705 Use the regex cache for static Regex.Count and Regex.EnumerateSplits
  • #​706 Hash spans without copying the input to a new array
  • #​707 Read the backing array through a compiled accessor in CollectionsMarshal.AsSpan
  • #​708 Count and test BitArray bits a word at a time
  • #​709 Read lines until ReadLineAsync returns null in the File polyfills
  • #​710 Use the static one-shots in the CryptographicOperations extension polyfills
  • #​711 Read StringBuilder chunk fields through compiled accessors in GetChunks
  • #​712 Add fast paths for valid input to Utf8 and Utf16 IndexOfInvalidSubsequence
  • #​713 Parse spans directly in TryParse(ReadOnlySpan, IFormatProvider, out T)
  • #​714 Add an Int64 fast path to the TimeSpan.From* polyfills
  • #​715 Read Microsecond and Nanosecond straight from the ticks
  • #​716 Use whole-string invariant casing in string ToUpperOrdinal and ToLowerOrdinal
  • #​717 Build version 7 Guids from Guid.NewGuid below net8
  • #​718 Do not allocate in Random.NextInt64 and Random.NextBytes(Span)
  • #​719 GetMemberWithSameMetadataDefinitionAs triggers IL2070
  • #​720 Read spans directly in the hex Convert polyfills
  • #​721 Encode large Base64Url inputs with the vectorized encoder on net8
  • #​722 Use a 256 byte stack buffer in Base64Url.EncodeToString
  • #​723 Suppress IL2070 on GetMemberWithSameMetadataDefinitionAs

11.4.4

  • #​618 Fix string.Join(char, ReadOnlySpan) stack overflow
  • #​619 Fix swapped out parameters in Base64Url.DecodeFromUtf8
  • #​620 Fix NullReferenceException in span Contains with null elements
  • #​621 Polyfill ToHashSet on net47
  • #​622 Check cancellation before opening the file in File async write polyfills
  • #​623 Fix LeftJoin, RightJoin and FullJoin matching null keys
  • #​624 Add missing ConfigureAwait(false) to polyfill awaits
  • #​625 Fix NullReferenceException in span AnyExcept polyfills with null elements
  • #​626 Create parent directories in ZipArchive.ExtractToDirectory overwrite polyfill
  • #​627 Do not polyfill two-sequence Zip on netcoreapp3.0
  • #​628 Fix HashSet.TryGetValue throwing for null with a StringComparer
  • #​629 Accept padding and whitespace when decoding Base64Url
  • #​630 ...

Description has been truncated

@dependabot
build: Bump the nuget group with 23 updates
64e9d6c 
Bumps dotnet-stryker from 4.16.0 to 5.0.0
Bumps FluentAssertions from 7.2.2 to 8.11.0
Bumps FluentValidation from 12.1.1 to 12.2.0
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.12 to 10.0.14
Bumps Microsoft.AspNetCore.OpenApi from 10.0.12 to 10.0.14
Bumps Microsoft.CodeAnalysis.Analyzers from 3.11.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.CSharp from 4.14.0 to 5.12.0
Bumps Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.14
Bumps Microsoft.Extensions.Options from 10.0.12 to 10.0.14
Bumps Microsoft.Extensions.Primitives from 10.0.12 to 10.0.14
Bumps Microsoft.NET.Test.Sdk from 18.10.0 to 18.11.0
Bumps Microsoft.SourceLink.GitHub from 10.0.401 to 10.0.403
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0
Bumps Microsoft.Testing.Platform to 2.5.0, 2.5.2
Bumps Polyfill from 11.3.0 to 11.4.5
Bumps Scalar.AspNetCore from 2.17.3 to 2.19.0
Bumps Swashbuckle.AspNetCore.SwaggerUI from 10.2.3 to 10.3.1
Bumps System.Collections.Immutable from 10.0.12 to 10.0.14
Bumps System.Text.Json from 10.0.12 to 10.0.14
Bumps Verify.Http from 7.5.1 to 8.0.1
Bumps Verify.XunitV3 from 32.0.1 to 33.3.4
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.1
Bumps xunit.v3.mtp-v2 from 3.2.2 to 4.0.2

---
updated-dependencies:
- dependency-name: dotnet-stryker
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: FluentAssertions
  dependency-version: 8.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: FluentValidation
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Primitives
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.403
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Polyfill
  dependency-version: 11.4.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Swashbuckle.AspNetCore.SwaggerUI
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.Collections.Immutable
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Text.Json
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Verify.Http
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Verify.XunitV3
  dependency-version: 33.3.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: xunit.v3.mtp-v2
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Nov 15, 2026
This was referenced Nov 15, 2026
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants