chore(deps): update nuget non-major dependencies #1276
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.



This PR contains the following updates:
3.2.2->3.3.05.0.3->5.0.43.0.14->3.0.154.0.10->4.0.122.6.2->2.7.01.5.0->1.5.11.13.2->1.14.14.7.0->4.8.09.0.4->9.0.64.13.0->4.14.09.0.4->9.0.64.0.0->4.1.04.0.0->4.1.08.9.0->8.12.18.9.0->8.12.117.13.0->17.14.18.9.0->8.12.16.0.1->6.0.34.4.0->4.6.04.4.0->4.6.03.1.0->3.1.1Release Notes
Altinn/altinn-authorization-utils (Altinn.Authorization.ProblemDetails)
v3.3.0: Altinn.Authorization.ProblemDetails: v3.3.0Compare Source
Features
MultipleProblemDetails(#263) (397ae08)Altinn/altinn-accesstoken (Altinn.Common.AccessToken)
v5.0.4Compare Source
What's Changed
c5195efby @renovate in https://github.com/Altinn/altinn-accesstoken/pull/13745775bdby @renovate in https://github.com/Altinn/altinn-accesstoken/pull/13828deaedby @renovate in https://github.com/Altinn/altinn-accesstoken/pull/140Full Changelog: Altinn/altinn-accesstoken@Altinn.Common.AccessToken-5.0.3...Altinn.Common.AccessToken-5.0.4
Azure/azure-sdk-for-net (Azure.Extensions.AspNetCore.DataProtection.Blobs)
v1.5.1Compare Source
1.5.1 (2025-06-23)
Acknowledgments
Thank you to our developer community members who helped to make the Event Hubs client libraries better with their contributions to this release:
Bugs Fixed
ConfigureKeyManagementBlobClientOptionsto ensure that its dependencies were resolved in the correct scope to prevent issues due to lifetime drift. Previously, a new scope was created to resolveAzureBlobXmlRepository. However,AzureBlobXmlRepositoryis registered as a singleton and should be resolved from the same scope in which the options are being configured. Creating a new scope introduced unnecessary overhead and potential for unexpected behavior due to differences in service lifetime management. (A community contribution, courtesy of danielmarbach)dotnet/aspnetcore (Microsoft.AspNetCore.Mvc.Testing)
v9.0.6Bug Fixes
The Forwarded Headers Middleware now ignores
X-Forwarded-Headerssent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.Dependency Updates
52204f7to04ee1b4(#61762)Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.
Miscellaneous
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.
This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.
Full Changelog: v9.0.5...v9.0.6
v9.0.5: .NET 9.0.5Release
What's Changed
24a9e94to52204f7by @dependabot in https://github.com/dotnet/aspnetcore/pull/61261Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5
dotnet/runtime (Microsoft.Extensions.Options)
v9.0.6Bug Fixes
Read messages from binlog if process output is missing build finished message (#114676)
Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.
Fix debugger app hangs related to thread exit (#114917)
Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.
[Mono] Workaround MSVC miscompiling sgen_clz (#114903)
Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.
Do not set the salt or info if they are NULL for OpenSSL HKDF (#114877)
Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.
[Test Only] Fix Idn tests (#115032)
Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.
JIT: revised fix for fp division issue in profile synthesis (#115026)
Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.
Handle OSSL 3.4 change to SAN:othername formatting (#115361)
Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.
[Mono] Fix c11 ARM64 atomics to issue full memory barrier (#115635)
Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.
Performance Improvements
[WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#114678)
Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.
Improve distribute_free_regions (#115167)
Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.
Technical Improvements
Strip trailing slash from source dir for cmake4 (#114905)
Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.
Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#114995)
Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.
Add support for more libicu versions (#115376)
Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.
Infrastructure
Run outerloop pipeline only for release branches, not staging/preview (#115011)
Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.
Update CentOS Stream, Debian, OpenSUSE (#115027)
Updates build and test infrastructure to use newer versions of CentOS Stream, Debian, and OpenSUSE, ensuring ongoing compatibility and security with supported Linux distributions.
Update MacOS signing to use PME (#115634)
Switches MacOS code signing to use PME, improving the security and reliability of the signing process for MacOS releases.
Dependency Updates
Update dependencies from dotnet/roslyn (#115353)
Integrates the latest updates from the Roslyn compiler, bringing in bug fixes, performance improvements, and new language features.
Update dependencies from dotnet/arcade (#115085)
Updates the Arcade build infrastructure dependency, ensuring the latest build tools and scripts are used.
Update dependencies from dotnet/sdk (#114856, #115466)
Brings in the latest changes from the .NET SDK, improving build reliability and incorporating upstream fixes.
Update dependencies from dotnet/icu (#114762, #115440)
Updates the ICU library dependency, enhancing globalization support and fixing related issues.
Update dependencies from dotnet/cecil (#114670)
Incorporates the latest Mono.Cecil updates, improving assembly manipulation and metadata handling.
Update dependencies from dotnet/emsdk (#114702)
Updates the Emscripten SDK dependency, ensuring up-to-date WebAssembly toolchain support.
Update dependencies from dotnet/xharness (#114855)
Brings in the latest XHarness test runner updates, improving test automation and reliability.
Miscellaneous
Update branding to 9.0.6 (#115385)
Updates version branding throughout the repository to reflect the 9.0.6 release.
Fix line endings (#115413)
Standardizes line endings across the codebase, improving cross-platform consistency and reducing merge conflicts.
[automated] Merge branch 'release/9.0' => 'release/9.0-staging' (#114700)
Automated merge to synchronize changes between release branches, ensuring consistency across development streams.
Merging internal commits for release/9.0 (#115535)
Integrates internal commits into the release/9.0 branch, consolidating changes for the release.
[manual] Merge release/9.0-staging into release/9.0 (#115497)
Manually merges staging changes into the main release branch, preparing for the official release.
This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.
Full Changelog: dotnet/runtime@v9.0.5...v9.0.6
v9.0.5: .NET 9.0.5Release
What's Changed
osx.14.arm64.openandosx.15.amd64.openqueues by @github-actions in https://github.com/dotnet/runtime/pull/114617Full Changelog: dotnet/runtime@v9.0.4...v9.0.5
microsoft/FeatureManagement-Dotnet (Microsoft.FeatureManagement)
v4.1.0Compare Source
4.1.0 - May 22, 2025
Microsoft.FeatureManagement Updates
The packages associated with this release are
Microsoft.FeatureManagement
Enhancements
DefaultWhenEnabledandVariantAssignmentPercentagefields to theFeatureEvaluationevent. #495Microsoft.FeatureManagement.AspNetCore
Enhancements
Microsoft.FeatureManagementreference to4.1.0. See the release notes for more information on the changes.Bug Fix
Microsoft.FeatureManagement.Telemetry.ApplicationInsights
Enhancements
Microsoft.FeatureManagementreference to4.1.0. See the release notes for more information on the changes.Bug Fix
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.Protocols.OpenIdConnect)
v8.12.1Compare Source
====
Fundamentals
v8.12.0Compare Source
====
New Features
Added event handling capabilities to the
ConfigurationManager, enabling consumers to subscribe to configuration change events. This enhancement improves extensibility and allows more responsive applications. For details see #3253Bug Fixes
Introduced the expected overload of
Base64UrlEncoder.Decodefor .NET 6 and 8, ensuring compatibility and preventing missing method issues on these frameworks.For details see #3249
Fundamentals
Incorporated AI assist rules to enhance AI agents effectiveness.
For details see #3255
Upgraded analyzer packages for improved diagnostics and code consistency (in particular delegates are added).
For details see #3256
Centralized suppression of RS006 warnings in project files for easier management.
For details see #3230
v8.11.0Compare Source
=====
New Features:
JsonWebTokenHandler.DecryptTokenWithConfigurationAsync, which decrypts a JWE token using keys from eitherTokenValidationParametersor, if not present, from configuration (such as via a ConfigurationManager). This enhancement improves developer experience by enabling asynchronous, cancellation-aware JWE decryption scenarios, aligning with modern .NET async patterns and making integration with external key/configuration sources more robust and observable. See PR #3243 for details.v8.10.0Compare Source
=====
Bug Fixes
Fundamentals
Configuration
📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.