Skip to content

Bump Aspire.Hosting.AppHost and 23 others #738

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 4, 2025

Updated Aspire.Hosting.AppHost from 8.2.0 to 9.4.0.

Release notes

Sourced from Aspire.Hosting.AppHost's releases.

9.4.0

We are excited to share that our 9.4.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://learn.microsoft.com/en-us/dotnet/aspire/whats-new/dotnet-aspire-9.4 to find what's new in 9.4.0!

What's Changed

9.3.2

What's Changed

Full Changelog: dotnet/aspire@v9.3.1...v9.3.2

9.3.1

What's Changed

Full Changelog: dotnet/aspire@v9.3.0...v9.3.1

9.3.0

We are excited to share that our 9.3.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Find out what is new here.

What's Changed

9.2.1

We are excited to share that our 9.2.1 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Try it out and share your feedback 😃

What's Changed

Full Changelog: dotnet/aspire@v9.2.0...v9.2.1

9.2.0

We are excited to share that our 9.2.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.1.0

We are excited to share that our 9.1.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.0.0

We are excited to share that our 9.0.0 release of .NET Aspire has shipped! All of the packages are available in NuGet.org now. Please check out what's new in this release. Try it out and share your feedback 😃

What's Changed

9.0.0-rc.1.24511.1

This represents the first prerelease of 9.0.0 which is packed of cool features 😃. For all of the details on this release as well as info on how to try it out, please check out our release blog post.

What's Changed

8.2.2

This is the last planned release for .NET Aspire before we ship .NET Aspire 9.0. Given all of our efforts are in 9.0 at this point, this patch release mostly includes dependency updates as well as a minor bug fix.

What's Changed

Full Changelog: dotnet/aspire@v8.2.1...v8.2.2

8.2.1

This marks the first patch release for .NET Aspire 8.2. Given this is a patch release, content is on the lighter side, with the most important highlights being fixing regressions that were found in 8.2.0 (like #​5490, #​4851, #​5486, and #​5674) as well as updating transitive dependencies.

What's Changed

Full Changelog: dotnet/aspire@v8.2.0...v8.2.1

Commits viewable in compare view.

Updated Azure.Monitor.OpenTelemetry.AspNetCore from 1.2.0 to 1.3.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated coverlet.msbuild from 3.2.0 to 6.0.4.

Release notes

Sourced from coverlet.msbuild's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

Improvements

Diff between 6.0.0 and 6.0.1

6.0.0

Fixed
-Could not write lines to file CoverletSourceRootsMapping - in use by another process coverlet-coverage/coverlet#1155
-Incorrect coverage for methods returning IAsyncEnumerable in generic classes coverlet-coverage/coverlet#1383
-Wrong branch coverage for async methods .NET Standard 1.x coverlet-coverage/coverlet#1376
-Empty path exception in visual basic projects coverlet-coverage/coverlet#775
-Align published nuget package version to github release version coverlet-coverage/coverlet#1413
-Sync nuget and github release versions coverlet-coverage/coverlet#1122

Improvements
-Migration of the project to .NET 6.0 coverlet-coverage/coverlet#1473

Breaking changes
New parameter ExcludeAssembliesWithoutSources to control automatic assembly exclusion coverlet-coverage/coverlet#1164. The parameter InstrumentModulesWithoutLocalSources has been removed. since it can be handled by setting ExcludeAssembliesWithoutSources to None.
The default heuristics for determining whether to instrument an assembly has been changed. In previous versions any missing source file was taken as a signal that it was a third-party project that shouldn't be instrumented, with exceptions for some common file name patterns for source generators. Now only assemblies where no source files at all can be found are excluded from instrumentation, and the code for detecting source generator files have been removed. To get back to the behaviour that at least one missing file is sufficient to exclude an assembly, set ExcludeAssembliesWithoutSources to MissingAny, or use assembly exclusion filters for more fine-grained control.

Diff between 3.2.0 and 6.0.0

5.8.0

Fixed

-Fix TypeLoadException when referencing Microsoft.Extensions.DependencyInjection v6.0.1 #​1390
-Source Link for code generators fails #​1322
-Await foreach has wrong branch coverage when method is generic #​1210
-ExcludeFromCodeCoverage attribute on local functions ignores lambda expression #​1302

Added

-Added InstrumentModulesWithoutLocalSources setting #​1360 by @​TFTomSun

Diff between 3.1.2 and 3.2.0

5.7.2

Fixed
-Fix CoreLib's coverage measurement is broken #​1286
-Fix UnloadModule injection 1291

Diff between 3.1.1 and 3.1.2

5.7.1

Fixed
-Fix wrong branch coverage with EnumeratorCancellation attribute #​1275 -Fix negative coverage exceeding int.MaxValue #​1266
-Fix summary output format for culture de-DE #​1263
-Fix branch coverage issue for finally block with await #​1233
-Fix threshold doesn't work when coverage empty #​1205
-Fix branch coverage issue for il switch #​1177
-Fix branch coverage with using statement and several awaits#​1176
-Fix CopyCoverletDataCollectorFiles to avoid to override user dlls for dotnet publish scenario #​1243

Improvements
-Improve logging in case of exception inside static ctor of NetstandardAwareAssemblyResolver #​1230
-When collecting open the hitfile with read access #​1214 by https://github.com/JamesWTruher
-Add CompilerGenerated attribute to the tracker #​1229

Diff between 3.1.0 and 3.1.1

5.7.0

Fixed
-Fix branch coverage for targetframework net472 #​1167
-Fix F# projects with unkown source #​1145
-Fix SkipAutoProps for inline assigned properties #​1139
-Fix partially covered throw statement #​1144
-Fix coverage threshold not failing when no coverage #​1115
-Fix partially covered await foreach statement #​1107 by https://github.com/alexthornton1
-Fix System.MissingMethodException(TryGetIntArgFromDict) #​1101
-Fix ExcludeFromCodeCoverage on props #​1114
-Fix incorrect branch coverage with await using #​1111 by https://github.com/alexthornton1

Added
-Support deterministic reports #​1113
-Specifying threshold level for each threshold type #​1123 by https://github.com/pbmiguel

Improvements
-Implementation of Npath complexity for the OpenCover reports #​1058 by https://github.com/benjaminZale

Diff between 3.0.3 and 3.1.0

5.6.3

Fixed
-Fix code coverage stops working if assembly contains source generators generated file #​1091

Diff between 3.0.2 and 3.0.3

5.6.2

Fixed
-Fix multi-line lambda coverage regression #​1060
-Opt-in reachability helper to mitigate resolution issue #​1061

Diff between 3.0.1 and 3.0.2

5.6.1

Fixed
-Fix severe loss in coverage #​1043 by https://github.com/daveMueller

5.6.0

Fixed
-Attribute exclusion does not work if attribute name does not end with "Attribute" #​884 by https://github.com/bddckr
-Fix deterministic build+source link bug #​895
-Fix anonymous delegate compiler generate bug #​896
-Fix incorrect branch coverage with await ValueTask #​949 by https://github.com/alexthornton1
-Fix switch pattern coverage #​1006

Added
-Skip autoprops feature #​912
-Exclude code that follows [DoesNotReturn] from code coverage #​904 by https://github.com/kevin-montrose
-CoverletReport MSBuild variable containing coverage filenames #​932 by https://github.com/0xced
-Add Visual Studio Add-In #​954 by https://github.com/FortuneN
-Remove workaround for deterministic build for sdk >= 3.1.100 #​965
-Allow standalone coverlet usage for integration/end-to-end tests using .NET tool driver #​991
-Support .NET Framework(>= net461) for in-process data collectors #​970

5.4.0

Fixed
-Fix for code complexity not being generated for methods for cobertura reporter #​738 by https://github.com/dannyBies
-Fix coverage, skip branches in generated MoveNext() for singleton iterators #​813 by https://github.com/bert2
-Fix 'The process cannot access the file...because it is being used by another process' due to double flush for collectors driver #coverlet-coverage/coverlet#835
-Fix skip [ExcludefromCoverage] for generated async state machine #​849

Added
-Added support for deterministic build for msbuild/collectors driver #​802 #​796 with the help of https://github.com/clairernovotny and https://github.com/tmat

Improvements
-Refactore DependencyInjection #​728 by https://github.com/daveMueller

5.3.1

Fixed
-Fix ExcludeFromCodeCoverage attribute bugs #​129 and #​670 with #​671 by https://github.com/matteoerigozzi
-Fix bug with nested types filtering #​689
-Fix Coverage Issue - New Using + Async/Await + ConfigureAwait #​669
-Improve branch detection for lambda functions and async/await statements #​702 by https://github.com/matteoerigozzi
-Improve coverage, hide compiler generated branches for try/catch blocks inside async state machine #​716 by https://github.com/matteoerigozzi
-Improve coverage, skip lambda cached field #​753

Improvements
-Trim whitespace between values when reading from configuration from runsettings #​679 by https://github.com/EricStG
-Code improvement, flow ILogger to InstrumentationHelper #​727 by https://github.com/daveMueller
-Add support for line branch coverage in OpenCover format #​772 by https://github.com/costin-zaharia

5.3.0

Added
-Add log to tracker #​553
-Exclude by assembly level System.Diagnostics.CodeAnalysis.ExcludeFromCodeCoverage #​589
-Allow coverlet integration with other MSBuild test strategies#​615 by https://github.com/sharwell

Fixed
-Fix and simplify async coverage #​549
-Improve lambda scenario coverage #​583
-Mitigate issue in case of failure in assembly loading by cecil #​625
-Fix ConfigureAwait state machine generated branches #​634
-Fix coverage overwritten if the project has multiple target frameworks #​636
-Fix cobertura Jenkins reporter + source link support #​614 by https://github.com/daveMueller
-Fix pdb file locking during instrumentation #​656

Improvements
-Improve exception message for unsupported runtime [#​569](https://github.com/tonerdo/ coverlet/pull/569) by https://github.com/daveMueller
-Improve cobertura absolute/relative path report generation #​661 by https://github.com/daveMueller

5.2.0

[Feature][Collectors]Output multiple formats #​533
[Bug fix] Fix exclude by files #​524
[Feature] Skip instrumentation of module with embedded ppbd without local sources #​510 -> with this today xunit will be skipped in automatic way.
[Bug fix] Changed to calculate based on the average coverage of the module #​479
[Bug fix] Fix property attribute detection #​477
[Feature] Different exit codes to indicate particular failures #​412
[Bug fix] Fix instrumentation serialization bug #​458
[Bug fix] Fix culture for cobertura xml report #​464

5.1.1

#​406 downgrades verbosity when hits file isn't found
#​409 Improves Coverage object to remove need to statically pass an instance of it
#​415 Improves validation of hits file existence

5.1.0

#​367 ensures invalid PDBs do not error out instrumentation
#​368 fixes package layout adding support for .NET framework projects
#​375 ensures PDBs exist before trying to restore them and prevents errors for assemblies with embedded PDBs
#​376 makes inclusion of test assembly excluded by default and configurable
#​383 ensures Coverlet restores original assemblies if process exits unexpectedly
#​397 rounds down Coverage result

5.0.0

#​303 fixes strong name validation errors
#​309 adds option to only record a single hit to improve performance
#​318 adds support for covering test files
#​322 reverts using memory mapped files to store hit counts
#​331 fixes open cover reporting errors
#​341 adds logging to Coverlet to improve debugging

4.1.1

#​286 Fixes type loading issues with .NET Framework assemblies
#​291 Adds enhancements to multi-threaded scenarios
#​297 and #​302 Fixes issues with instrumenting System.Private.CoreLib
#​276 switches to using memory mapped files instead of regular files for storing hit information
#​277 Enhances support for async/await branches after coverage merge

4.1.0

  • #​259 adds support for assemblies with embedded PDBs
  • #​260 adds support for using SourceLink provided source file URLs in coverage results
  • #​236 improves matcher when computing excluded source files
  • #​256 fixes TeamCity reporter decimal separator

4.0.0

  • #​244 fixes error in TeamCity reporting
  • #​252 updates version of Mono.Cecil
  • #​233 adds support for specifying custom attributes on types/methods that you'd like to exclude
  • #​253 allows Coverlet to probe for additional assemblies beyond the dependencies of the test assembly

3.2.2

  • #​220 ensure merging doesn't fail if existing results file doesn't exist
  • #​132 adds support for computation of cyclomatic complexity
  • #​227 adds support for TeamCity reporting format

3.2.1

  • #​158 supports branch coverage on asynchronous calls
  • #​204 and #​211 fixes coverage result merging algorithm
  • #​209 Adds specific support for instrumenting System.Private.CoreLib

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.22.0 to 2.23.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

2.23.0

  • no changes since beta.

2.23.0-beta1

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.22.0 to 2.23.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

2.23.0

  • no changes since beta.

2.23.0-beta1

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.18.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

...

Description has been truncated

Bumps Aspire.Hosting.AppHost from 8.2.0 to 9.4.0
Bumps Azure.Monitor.OpenTelemetry.AspNetCore from 1.2.0 to 1.3.0
Bumps coverlet.msbuild to 6.0.4
Bumps Microsoft.ApplicationInsights from 2.22.0 to 2.23.0
Bumps Microsoft.ApplicationInsights.AspNetCore from 2.22.0 to 2.23.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.8 to 8.0.18
Bumps Microsoft.AspNetCore.Mvc.Testing to 8.0.18
Bumps Microsoft.Extensions.Configuration.Json from 8.0.0 to 9.0.7
Bumps Microsoft.NET.Test.Sdk to 17.14.1
Bumps NSubstitute from 5.1.0 to 5.3.0
Bumps OpenTelemetry.Exporter.Console from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Extensions.Hosting from 1.9.0 to 1.12.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.9.0 to 1.12.0
Bumps Shouldly to 4.3.0
Bumps Swashbuckle.AspNetCore.Annotations from 6.7.0 to 9.0.3
Bumps Swashbuckle.AspNetCore.Swagger from 6.7.0 to 9.0.3
Bumps Swashbuckle.AspNetCore.SwaggerGen from 6.7.0 to 9.0.3
Bumps Swashbuckle.AspNetCore.SwaggerUI from 6.7.0 to 9.0.3
Bumps System.DirectoryServices.Protocols from 8.0.0 to 9.0.7
Bumps System.Text.Encodings.Web from 8.0.0 to 9.0.7
Bumps System.Text.Json from 8.0.5 to 9.0.7
Bumps xunit to 2.9.3
Bumps xunit.runner.visualstudio to 3.1.3

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Azure.Monitor.OpenTelemetry.AspNetCore
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.ApplicationInsights
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.ApplicationInsights.AspNetCore
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: NSubstitute
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Shouldly
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Shouldly
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Swashbuckle.AspNetCore.Annotations
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Swashbuckle.AspNetCore.Swagger
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Swashbuckle.AspNetCore.SwaggerGen
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Swashbuckle.AspNetCore.SwaggerUI
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.DirectoryServices.Protocols
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.Text.Encodings.Web
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.Text.Json
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants