Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 25, 2025

Updated Azure.Storage.Blobs from 12.13.0 to 12.25.0.

Release notes

Sourced from Azure.Storage.Blobs's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated dotnet-reportgenerator-globaltool from 4.5.8 to 5.4.10.

Release notes

Sourced from dotnet-reportgenerator-globaltool's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated dotnet-sonarscanner from 10.2.0 to 10.3.0.

Updated Microsoft.AspNetCore.Authentication.OpenIdConnect from 8.0.13 to 8.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.OpenIdConnect's releases.

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

Commits viewable in compare view.

Updated Microsoft.Azure.AppConfiguration.AspNetCore from 8.0.0 to 8.3.0.

Release notes

Sourced from Microsoft.Azure.AppConfiguration.AspNetCore's releases.

8.2.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

  • Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

    public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)
    public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)
  • Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #​645

  • This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #​380

    public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Other Changes

  • Removed the FeatureFlagId property from feature flag telemetry. #​655
  • Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #​657
  • This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #​600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

  • Added the ability to set a client factory used for creating ConfigurationClient instances. #​380

    public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

8.1.2

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.1.2 - April 22nd, 2025

Bug Fixes

  • Calling IServiceCollection.AddAzureAppConfiguration now correctly adds an instance of IConfigurationRefresherProvider to the service collection only the first time it is called instead of adding an instance on each invocation. #​611

Microsoft.Azure.AppConfiguration.AspNetCore 8.1.2 - April 22nd, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.2. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.1.2 - April 22nd, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.2. See the release notes for more information on the changes.

8.1.1

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.1.1 - February 26th, 2025

Bug Fixes

  • Fixed a bug introduced in the 8.1.0 release where calls to FeatureFlagOptions.Select were ignored if they were followed by a call to either AzureAppConfigurationOptions.Select or AzureAppConfigurationOptions.SelectSnapshot. #​628

Microsoft.Azure.AppConfiguration.AspNetCore 8.1.1 - February 26th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.1. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.1.1 - February 26th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.1. See the release notes for more information on the changes.

8.1.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.1.0 - February 24th, 2025

Enhancements

  • Added the ability to monitor all selected key-values for refresh with the following new API. #​536

    public AzureAppConfigurationRefreshOptions RegisterAll()

    When this API is called, changes to any selected key-values will cause a reload of the configuration.

  • Added the ability to check if the type of an IConfigurationSource is AzureAppConfigurationSource with the following new extension. #​456

    public static bool IsAzureAppConfigurationSource(this IConfigurationSource source)

Bug Fixes

  • Fixed a bug where changing a feature flag would always override an already loaded feature flag with the same key but different label on refresh. As part of this change, feature flags are now always refreshed as a collection, meaning a change in any selected flag will result in a reload of all selected feature flags on refresh. #​317
  • Fixed a bug where an unnecessary refresh could occur when a request to App Configuration was served from the cache. #​588

Other Changes

  • Removed support for the configuration_reference property in feature flags. #​614
  • AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview version, has been removed in this stable version. #​600

Microsoft.Azure.AppConfiguration.AspNetCore 8.1.0 - February 24th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.1.0 - February 24th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.0. See the release notes for more information on the changes.

8.1.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.1.0-preview - October 24, 2024

Enhancements

  • Added support for injecting additional telemetry metadata to feature flags if telemetry is enabled
    • AllocationId represents the version of an allocation on a feature flag. The AllocationId changes when there are essential modifications to the allocation, such as adjustments to the percentile or variant configuration, but not for non-essential changes like feature flag descriptions.

Microsoft.Azure.AppConfiguration.AspNetCore 8.1.0-preview - October 24, 2024

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.1.0-preview - October 24, 2024

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.1.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 8.0.1 to 9.0.7.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Read messages from binlog if process output is missing build finished message (#​114676)
    Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.

  • Fix debugger app hangs related to thread exit (#​114917)
    Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.

  • [Mono] Workaround MSVC miscompiling sgen_clz (#​114903)
    Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.

  • Do not set the salt or info if they are NULL for OpenSSL HKDF (#​114877)
    Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.

  • [Test Only] Fix Idn tests (#​115032)
    Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.

  • JIT: revised fix for fp division issue in profile synthesis (#​115026)
    Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115361)
    Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.

  • [Mono] Fix c11 ARM64 atomics to issue full memory barrier (#​115635)
    Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.

Performance Improvements

  • [WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#​114678)
    Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.

  • Improve distribute_free_regions (#​115167)
    Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114905)
    Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​114995)
    Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.

  • Add support for more libicu versions (#​115376)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Run outerloop pipeline only for release branches, not staging/preview (#​115011)
    Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.

... (truncated)

9.0.5

Release

What's Changed

9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

9.0.1

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.0...v9.0.1

9.0.0

Release

What's Changed

Description has been truncated

Bumps Azure.Storage.Blobs from 12.13.0 to 12.25.0
Bumps dotnet-reportgenerator-globaltool from 4.5.8 to 5.4.10
Bumps dotnet-sonarscanner from 10.2.0 to 10.3.0
Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 8.0.13 to 8.0.18
Bumps Microsoft.Azure.AppConfiguration.AspNetCore from 8.0.0 to 8.3.0
Bumps Microsoft.Extensions.Configuration.UserSecrets from 8.0.1 to 9.0.7
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 8.0.2 to 9.0.7
Bumps Microsoft.Extensions.Hosting.Abstractions from 8.0.1 to 9.0.7
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 9.0.7
Bumps Microsoft.Extensions.Options from 8.0.2 to 9.0.7
Bumps Microsoft.FeatureManagement.AspNetCore from 4.0.0 to 4.2.1
Bumps Microsoft.VisualStudio.Web.CodeGeneration.Design from 8.0.7 to 9.0.0
Bumps System.IdentityModel.Tokens.Jwt from 6.36.0 to 8.13.0
Bumps xunit.runner.visualstudio from 3.1.1 to 3.1.3

---
updated-dependencies:
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.4.10
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: dotnet-sonarscanner
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect
  dependency-version: 8.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Azure.AppConfiguration.AspNetCore
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.FeatureManagement.AspNetCore
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.VisualStudio.Web.CodeGeneration.Design
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.13.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added Dependabot .NET Pull requests that update .NET code Dependabot dependencies Pull requests that update a dependency file labels Jul 25, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 25, 2025 02:08
@dependabot dependabot bot added Dependabot dependencies Pull requests that update a dependency file Dependabot .NET Pull requests that update .NET code labels Jul 25, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 29, 2025

Superseded by #187.

@dependabot dependabot bot closed this Jul 29, 2025
@dependabot dependabot bot deleted the dependabot/nuget/dot-config/multi-c56a5a2d3d branch July 29, 2025 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependabot dependencies Pull requests that update a dependency file Dependabot .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants