Skip to content

Bump Microsoft.AspNetCore.OpenApi and 3 others #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump Microsoft.AspNetCore.OpenApi and 3 others #21

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Updated Microsoft.AspNetCore.OpenApi from 9.0.0 to 9.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 9.0.8 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Pinned MongoDB.Bson at 3.6.0.

Release notes

Sourced from MongoDB.Bson's releases.

3.6.0

This is the general availability release for the 3.6.0 version of the driver.

The main new features in 3.6.0 include:

  • CSHARP-5717: Typed builders for vector indexes
  • CSHARP-5812: Support lexical prefilters for vector search
  • CSHARP-5763: Auto-embedding for vector search
  • CSHARP-5737: Add legacy representation for TimeOnly
  • CSHARP-5705: Use standard RID paths in MongoDB.Driver.Encryption packaging
  • CSHARP-5730: Support static String.Compare method
  • CSHARP-1913: Support using Dictionary fields as IEnumerable<KeyValuePair<TKey, TValue>>
  • CSHARP-5779: Support Dictionary Keys and Values properties
  • CSHARP-5786: Add Decimal128 ctor overload for byte/short, for compatibility with net10
  • CSHARP-5793: Map MemoryExtensions Contains and SequenceEqual with null comparer to Enumerable methods with no comparer parameter
  • CSHARP-5749: Support C# 14 changes that result in overloads now binding MemoryExtensions extension methods

Improvements:

  • CSHARP-5675: Where possible, return null for average over the empty set
  • CSHARP-5666: Remove GetBitArray allocations in BsonClassMapSerializer.DeserializeClass
  • CSHARP-5748: Use KeyValuePairSerializer consistently for KeyValuePair
  • CSHARP-5663: Avoid RentedBuffer boxing in DisposableSegment
  • CSHARP-5734: Update doc comments for IBsonIdProvider GetDocumentId method
  • CSHARP-5348: Avoid allocations for Bson*Context
  • CSHARP-5628: Add new boolean expression simplifications to PartialEvaluator
  • CSHARP-5632: Consolidate driver project Type extension methods in Misc\TypeExtensions.cs
  • CSHARP-5785: Optimize LINQ translation for First() and FirstOrDefault() methods with predicates
  • CSHARP-5667: Switch to 'for' loop in BsonClassMapSerializer.SerializeClass to reduce allocations
  • CSHARP-5807: Add benchmarks with strong-typed POCOs

Fixes:

  • CSHARP-5725: C# driver stopped working with Unity since v3.2.0
  • CSHARP-5757: The problem of filtering by derived types

Maintenance:

  • CSHARP-3984: Remove BinaryConnection.DropBox
  • CSHARP-5744: Fix interruptInUse flaky tests
    The full list of issues resolved in this release is available at CSHARP JIRA project.
    Documentation on the .NET driver can be found here.

3.5.2

[!IMPORTANT]

.NET 10 / C# 14

If you are targeting .NET 10 or using C# 14 in your project you should upgrade to this release as soon as possible as it contains important compatibilty fixes.

Projects targeting prior versions of .NET or not using C# 14 can upgrade at their convenience.

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5793: Map MemoryExtensions Contains and SequenceEqual with null comparer to Enumerable methods with no comparer parameter

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

3.5.1

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5777: Avoid ThreadPool-dependent IO methods in sync API
  • CSHARP-5743: Version 3.5 causes delays and disruptions because it is trying to access a disposed semaphore slim
  • CSHARP-5749: Support C# 14 changes that result in overloads now binding MemoryExtensions extension methods
  • CSHARP-5786: Add Decimal128 byte constructor overload (net10 compat)

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

3.5.0

This is the general availability release for the 3.5.0 version of the driver.

[!IMPORTANT]

Internal Changes for an Upcoming Feature

This release includes low level changes to internal subsystems including operation execution, timeout handling, and resource cleanup logic - in preparation for supporting Client-Side Operations Timeout (CSOT) in an upcoming release.
While these changes should be backward-compatible and not alter existing behavior, they touch core driver infrastructure.
If you experience unexpected issues such as:

  • Operations timing out unexpectedly or not timing out when expected
  • Unusual delays or hangs in database calls
  • Differences in command cancellation behavior

Please let us know via the MongoDB JIRA Driver project or your MongoDB support channel, providing driver logs and a reproduction if possible.

Experimental Support for Queryable Encryption Text Field Prefix, Suffix and Substring Queries

Substring, prefix and suffix search for Queryable Encryption are in preview and should be used for experimental workloads only. These features are unstable and their security is not guaranteed until released as Generally Available (GA). The GA version of these features may not be backwards compatible with the preview version.

The main new features in 3.5.0 include:

  • CSHARP-5453: Add builder for CSFLE schemas
  • CSHARP-3222: Add LINQ support for median and percentile accumulators/window functions
  • CSHARP-5672: Support sorting by value in PushEach operation
  • CSHARP-5625: Support text indexes for explicit and automatic encryption
  • CSHARP-734: SOCKS5 Proxy Support
  • CSHARP-3458: Extend IAsyncCursor and IAsyncCursorSource to support IAsyncEnumerable

Improvements:

  • CSHARP-5603: Add Big Endian support in BinaryVectorReader and BinaryVectorWriter
  • CSHARP-5614: Fix deserialization of primitive arrays on Big Endian systems
  • CSHARP-5619: Replace IConnection.SendMessages with the method to send a single message
  • CSHARP-5377: Eliminate unnecessary killCursors command when batchSize == limit

Fixes:

  • CSHARP-3435: FilterDefinition Inject method should use root serializer
  • CSHARP-3662: MongoClientSettings.SocketTimeout does not work for values under 500ms on Windows for sync code
  • CSHARP-4040: Fix bug when using field with same element name as discriminator
  • CSHARP-5587: FindOneAndUpdate should insert correct discriminator value on upsert
  • CSHARP-3494: Fix discriminator for generic types
  • CSHARP-5588: Unable to select KeyValuePair Key when using camelCase convention
  • CSHARP-5633: BsonSerializer.IsTypeDiscriminated is not thread-safe

Maintenance:

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Pinned MongoDB.Driver at 3.6.0.

Release notes

Sourced from MongoDB.Driver's releases.

3.6.0

This is the general availability release for the 3.6.0 version of the driver.

The main new features in 3.6.0 include:

  • CSHARP-5717: Typed builders for vector indexes
  • CSHARP-5812: Support lexical prefilters for vector search
  • CSHARP-5763: Auto-embedding for vector search
  • CSHARP-5737: Add legacy representation for TimeOnly
  • CSHARP-5705: Use standard RID paths in MongoDB.Driver.Encryption packaging
  • CSHARP-5730: Support static String.Compare method
  • CSHARP-1913: Support using Dictionary fields as IEnumerable<KeyValuePair<TKey, TValue>>
  • CSHARP-5779: Support Dictionary Keys and Values properties
  • CSHARP-5786: Add Decimal128 ctor overload for byte/short, for compatibility with net10
  • CSHARP-5793: Map MemoryExtensions Contains and SequenceEqual with null comparer to Enumerable methods with no comparer parameter
  • CSHARP-5749: Support C# 14 changes that result in overloads now binding MemoryExtensions extension methods

Improvements:

  • CSHARP-5675: Where possible, return null for average over the empty set
  • CSHARP-5666: Remove GetBitArray allocations in BsonClassMapSerializer.DeserializeClass
  • CSHARP-5748: Use KeyValuePairSerializer consistently for KeyValuePair
  • CSHARP-5663: Avoid RentedBuffer boxing in DisposableSegment
  • CSHARP-5734: Update doc comments for IBsonIdProvider GetDocumentId method
  • CSHARP-5348: Avoid allocations for Bson*Context
  • CSHARP-5628: Add new boolean expression simplifications to PartialEvaluator
  • CSHARP-5632: Consolidate driver project Type extension methods in Misc\TypeExtensions.cs
  • CSHARP-5785: Optimize LINQ translation for First() and FirstOrDefault() methods with predicates
  • CSHARP-5667: Switch to 'for' loop in BsonClassMapSerializer.SerializeClass to reduce allocations
  • CSHARP-5807: Add benchmarks with strong-typed POCOs

Fixes:

  • CSHARP-5725: C# driver stopped working with Unity since v3.2.0
  • CSHARP-5757: The problem of filtering by derived types

Maintenance:

  • CSHARP-3984: Remove BinaryConnection.DropBox
  • CSHARP-5744: Fix interruptInUse flaky tests
    The full list of issues resolved in this release is available at CSHARP JIRA project.
    Documentation on the .NET driver can be found here.

3.5.2

[!IMPORTANT]

.NET 10 / C# 14

If you are targeting .NET 10 or using C# 14 in your project you should upgrade to this release as soon as possible as it contains important compatibilty fixes.

Projects targeting prior versions of .NET or not using C# 14 can upgrade at their convenience.

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5793: Map MemoryExtensions Contains and SequenceEqual with null comparer to Enumerable methods with no comparer parameter

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

3.5.1

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5777: Avoid ThreadPool-dependent IO methods in sync API
  • CSHARP-5743: Version 3.5 causes delays and disruptions because it is trying to access a disposed semaphore slim
  • CSHARP-5749: Support C# 14 changes that result in overloads now binding MemoryExtensions extension methods
  • CSHARP-5786: Add Decimal128 byte constructor overload (net10 compat)

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

3.5.0

This is the general availability release for the 3.5.0 version of the driver.

[!IMPORTANT]

Internal Changes for an Upcoming Feature

This release includes low level changes to internal subsystems including operation execution, timeout handling, and resource cleanup logic - in preparation for supporting Client-Side Operations Timeout (CSOT) in an upcoming release.
While these changes should be backward-compatible and not alter existing behavior, they touch core driver infrastructure.
If you experience unexpected issues such as:

  • Operations timing out unexpectedly or not timing out when expected
  • Unusual delays or hangs in database calls
  • Differences in command cancellation behavior

Please let us know via the MongoDB JIRA Driver project or your MongoDB support channel, providing driver logs and a reproduction if possible.

Experimental Support for Queryable Encryption Text Field Prefix, Suffix and Substring Queries

Substring, prefix and suffix search for Queryable Encryption are in preview and should be used for experimental workloads only. These features are unstable and their security is not guaranteed until released as Generally Available (GA). The GA version of these features may not be backwards compatible with the preview version.

The main new features in 3.5.0 include:

  • CSHARP-5453: Add builder for CSFLE schemas
  • CSHARP-3222: Add LINQ support for median and percentile accumulators/window functions
  • CSHARP-5672: Support sorting by value in PushEach operation
  • CSHARP-5625: Support text indexes for explicit and automatic encryption
  • CSHARP-734: SOCKS5 Proxy Support
  • CSHARP-3458: Extend IAsyncCursor and IAsyncCursorSource to support IAsyncEnumerable

Improvements:

  • CSHARP-5603: Add Big Endian support in BinaryVectorReader and BinaryVectorWriter
  • CSHARP-5614: Fix deserialization of primitive arrays on Big Endian systems
  • CSHARP-5619: Replace IConnection.SendMessages with the method to send a single message
  • CSHARP-5377: Eliminate unnecessary killCursors command when batchSize == limit

Fixes:

  • CSHARP-3435: FilterDefinition Inject method should use root serializer
  • CSHARP-3662: MongoClientSettings.SocketTimeout does not work for values under 500ms on Windows for sync code
  • CSHARP-4040: Fix bug when using field with same element name as discriminator
  • CSHARP-5587: FindOneAndUpdate should insert correct discriminator value on upsert
  • CSHARP-3494: Fix discriminator for generic types
  • CSHARP-5588: Unable to select KeyValuePair Key when using camelCase convention
  • CSHARP-5633: BsonSerializer.IsTypeDiscriminated is not thread-safe

Maintenance:

The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump Microsoft.AspNetCore.OpenApi and 3 others
5c1f326 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.0 to 9.0.12
Bumps Microsoft.Extensions.Logging from 9.0.8 to 10.0.2
Bumps MongoDB.Bson from 3.4.3 to 3.6.0
Bumps MongoDB.Driver from 3.4.3 to 3.6.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: MongoDB.Bson
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: MongoDB.Driver
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant