Skip to content

chore: Bump the minor-and-patch group with 31 updates #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
JerrettDavis merged 2 commits into from
Jan 13, 2026
Merged

chore: Bump the minor-and-patch group with 31 updates #46

JerrettDavis merged 2 commits into from
Jan 13, 2026

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Updated BenchmarkDotNet from 0.14.0 to 0.15.8.

Release notes

Sourced from BenchmarkDotNet's releases.

0.15.8

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.8.html

0.15.7

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.7.html

0.15.6

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.6.html

0.15.5

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.5.html

0.15.4

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.4.html

Highlights

Allow override method/property for ParamsSource (#​2832)

0.15.3

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.3.html

Highlights

Improvements:

  • Naot instruction set support for .NET 10+, migrate to ISA groupings in CPU summary #​2828
  • Support benchmark filtering for TestAdapter #​2662 #​2788
  • Support non-primitive external types in ArgumentsSource #​2820
  • Enable MSBuild parallel build via --nodeReuse:false #​2693 #​2814
  • Improve CPU detection #​2747 #​2749
  • Enable assembly signing for debug build #​2774

Deprecations:

Bug fixes:

  • Fix InvalidOperationException in diagnosers #​2758 #​2805
  • Fix file detection in NativeMemoryProfiler #​2794 #​2795
  • Fix long file paths issue in EtwProfiler #​2807 #​2808
  • Fix log duplications in TestAdapter #​2790
  • Fix x86 disassembler error for net462 #​2792
  • Fix IsNetCore and IsNativeAOT for single-file apps without AOT #​2799
  • Fix density plot generation in RPlotExporter for latest version of R #​2809

0.15.2

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.2.html

Highlights

  • The most significant update in this release is the enhanced accuracy of the memory diagnoser (#​2562). This improvement resolves the issue of incorrectly reported memory allocations (#​1542, #​2582).
  • We have introduced a new feature that allows users to sort benchmark jobs in numerical order (#​2768, #​2770).
  • Benchmark validation has been improved (#​2771).
  • An issue with non-persistent auto-generated JobId has been fixed (#​2777).

0.15.1

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.1.html

Highlights

0.15.0

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.0.html

Commits viewable in compare view.

Updated Markdig from 0.38.0 to 0.44.0.

Release notes

Sourced from Markdig's releases.

0.44.0

Changes

🧰 Misc

  • feat(link-helper): improve ASCII normalization handling (PR #​911) by @​mos379
  • Test netstandard (PR #​915) by @​MihaZupan
  • Use central package management (fb698598)

Full Changelog: 0.43.0...0.44.0

Published with dotnet-releaser

0.43.0

Changes

✨ New Features

  • Add a basic fuzzing project (PR #​903) by @​MihaZupan

🐛 Bug Fixes

  • Fix for table depth error when cell contains backticks (PR #​891) by @​phillip-haydon
  • Fix issue where an inline code block that spans multiple lines doesn't parse correctly (PR #​893) by @​phillip-haydon
  • Remove leading newline in block attributes (PR #​896) by @​Asttear
  • Fix IndexOutOfRangeException in CodeInlineParser (PR #​900) by @​MihaZupan
  • Fix build warnings (PR #​899) by @​MihaZupan
  • Fix edge cases in EmphasisInlineParser (PR #​902) by @​MihaZupan
  • Fix pipe table parsing with a leading paragraph (PR #​905) by @​MihaZupan

🚀 Enhancements

  • add options for link inline (PR #​894) by @​danielklecha
  • Move sln to slnx (PR #​901) by @​MihaZupan
  • Lazily allocate storage for ProcessInlinesBegin/End delegates on Blocks (PR #​906) by @​MihaZupan
  • Add another test for pipe tables (PR #​907) by @​MihaZupan

Full Changelog: 0.42.0...0.43.0

Published with dotnet-releaser

0.42.0

Changes

🐛 Bug Fixes

  • Fixes issue #​845 (PR #​888) by @​prozolic

🚀 Enhancements

  • Add support for a table without an extra new line before it (PR #​885) by @​dannyp32
  • Add source position tracking for grid tables (PR #​883) by @​messani

Full Changelog: 0.41.3...0.42.0

Published with dotnet-releaser

0.41.3

Changes

🐛 Bug Fixes

  • Fixes #​878: RoundtripRenderer: render indent and 0 blocks for ordered lists (PR #​879) by @​stylefish

📚 Documentation

  • Update readme.md (PR #​877) by @​Mertsch

Full Changelog: 0.41.2...0.41.3

Published with dotnet-releaser

0.41.2

Changes

🐛 Bug Fixes

  • Fix #​872 by reserve null title string. (PR #​876) by @​Akarinnnnn

Full Changelog: 0.41.1...0.41.2

Published with dotnet-releaser

0.41.1

Changes

🐛 Bug Fixes

  • Fix bug in Markdown.ToPlainText with code blocks (PR #​869) by @​prozolic

Full Changelog: 0.41.0...0.41.1

Published with dotnet-releaser

0.41.0

Changes

✨ New Features

  • Add AutoLinkOptions.AllowDomainWithoutPeriod (PR #​859) by @​JamesNK

🐛 Bug Fixes

  • chore: update repository's github path (PR #​861) by @​Meir017

🚀 Enhancements

  • Replace encoding polyfill with NET5+ one. (PR #​851) by @​Akarinnnnn
  • Implemented better indent control in TextRendererBase (PR #​838) by @​Melodi17
  • A couple perf improvements (PR #​864) by @​MihaZupan
  • Infer pipe table column widths from separator row (PR #​863) by @​Amberg
  • Improve Alert parsing perf (PR #​866) by @​MihaZupan
  • Update to CommonMark 0.31.2 (PR #​867) by @​MihaZupan

🏭 Tests

  • Update tests (09a4b81a)

📚 Documentation

  • Fix MathInline is called "math block" (PR #​865) by @​RamType0

📦 Dependencies

  • Update dependencies NuGet (5b323913)

Full Changelog: 0.40.0...0.41.0

Published with dotnet-releaser

0.40.0

Changes

🐛 Bug Fixes

  • Fix errors in LinkHelper and LinkInlineParser. (PR #​837) by @​snnz
  • Check that the alert candidate is not already in an alert block or nested within other elements. (PR #​842) by @​snnz
  • Fixes exception in DefinitionListParser.GetCurrentDefinitionList() (PR #​843) by @​snnz
  • Prevent GridTableParser from looking beyond the end of a line. (PR #​844) by @​snnz

Full Changelog: 0.39.1...0.40.0

Published with dotnet-releaser

0.39.1

Changes

🐛 Bug Fixes

  • Fix an incorrect offset in GridTableParser. (PR #​834) by @​snnz
  • Include opening and closing pipes in the table span (PR #​835) by @​snnz
  • Fix an error in the AbbreviationParser. (PR #​836) by @​snnz

🧰 Maintenance

  • Update ci badge (fdaef774)

Full Changelog: 0.39.0...0.39.1

Published with dotnet-releaser

0.39.0

Changes

🐛 Bug Fixes

  • Fix extra line feeds in link title (PR #​826) by @​snnz
  • Fix incorrect emphasis span calculation. (PR #​829) by @​snnz
  • Set delimiter char and count in CustomContainerInline instances. (PR #​831) by @​snnz
  • Set the correct source location in Footnote and FootnoteLinkReferenceDefinition (PR #​832) by @​snnz

🚀 Enhancements

  • Add .NET 9 target, drop .NET 6 (PR #​828) by @​MihaZupan

🧰 Misc

  • Update readme.md (310a55c7)

Full Changelog: 0.38.0...0.39.0

Published with dotnet-releaser

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Http.Abstractions from 2.2.0 to 2.3.9.

Release notes

Sourced from Microsoft.AspNetCore.Http.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.1.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0.

Release notes

Sourced from Microsoft.CodeAnalysis.Analyzers's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.CSharp from 4.8.0 to 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.CSharp.Workspaces from 4.8.0 to 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp.Workspaces's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 9.0.0 to 9.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Cosmos/FTS: Improved FullTextScore Translation for Multiple Keywords
    The translation of FullTextScore in Cosmos Full-Text Search has been updated to use multiple keywords instead of a keyword array, addressing issues with search accuracy and query compatibility. This resolves #​35983 and ensures more reliable full-text search results.
    #​36000 by @​maumar

Dependency Updates

  • [release/8.0] Update dependencies from dotnet/arcade
    Updated the Arcade build infrastructure dependencies for the 8.0 release branch, bringing in the latest improvements and security fixes from the Arcade ecosystem.
    #​35930 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Updated Arcade dependencies for the 9.0 release branch, ensuring the build system benefits from the latest tooling and reliability enhancements.
    #​36006 by @​dotnet-maestro
  • [release/8.0] Update dependencies from dotnet/arcade
    Another update to Arcade dependencies for the 8.0 branch, further aligning with upstream improvements and fixes.
    #​36085 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Additional update to Arcade dependencies for the 9.0 branch, maintaining up-to-date build tooling and infrastructure.
    #​36065 by @​dotnet-maestro

Technical Improvements

  • Merging Internal Commits for release/8.0
    Integrated various internal commits into the 8.0 release branch, improving code quality, maintainability, and aligning with internal standards.
    #​35926 by @​vseanreesermsft
  • Merging Internal Commits for release/8.0
    Additional internal commits merged into the 8.0 branch, further enhancing stability and maintainability.
    #​36080 by @​vseanreesermsft
  • Merging Internal Commits for release/9.0
    Integrated internal improvements into the 9.0 branch, ensuring consistency and codebase health.
    #​36081 by @​vseanreesermsft

Infrastructure

  • Update Branding to 9.0.6
    Updated the product branding and version numbers to 9.0.6, ensuring that all assemblies and packages reflect the correct release version.
    #​36044 by @​vseanreesermsft
  • Update Branding to 8.0.17
    Updated branding for the 8.0 release line to version 8.0.17, keeping versioning consistent across all release artifacts.
    #​36043 by @​vseanreesermsft

Miscellaneous

  • [automated] Merge branch 'release/8.0' => 'release/9.0'
    Automated merge of changes from the 8.0 branch into the 9.0 branch, ensuring that all relevant fixes and improvements are carried forward.
    #​35927 by @​github-actions
  • Merge release/9.0 to release/9.0-staging
    Merged the 9.0 branch into the 9.0-staging branch, preparing for further testing and validation before final release.
    #​36051 by @​AndriySvyryd
    ... (truncated)

9.0.5

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 9.0.0 to 9.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Cosmos/FTS: Improved FullTextScore Translation for Multiple Keywords
    The translation of FullTextScore in Cosmos Full-Text Search has been updated to use multiple keywords instead of a keyword array, addressing issues with search accuracy and query compatibility. This resolves #​35983 and ensures more reliable full-text search results.
    #​36000 by @​maumar

Dependency Updates

  • [release/8.0] Update dependencies from dotnet/arcade
    Updated the Arcade build infrastructure dependencies for the 8.0 release branch, bringing in the latest improvements and security fixes from the Arcade ecosystem.
    #​35930 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Updated Arcade dependencies for the 9.0 release branch, ensuring the build system benefits from the latest tooling and reliability enhancements.
    #​36006 by @​dotnet-maestro
  • [release/8.0] Update dependencies from dotnet/arcade
    Another update to Arcade dependencies for the 8.0 branch, further aligning with upstream improvements and fixes.
    #​36085 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Additional update to Arcade dependencies for the 9.0 branch, maintaining up-to-date build tooling and infrastructure.
    #​36065 by @​dotnet-maestro

Technical Improvements

  • Merging Internal Commits for release/8.0
    Integrated various internal commits into the 8.0 release branch, improving code quality, maintainability, and aligning with internal standards.
    #​35926 by @​vseanreesermsft
  • Merging Internal Commits for release/8.0
    Additional internal commits merged into the 8.0 branch, further enhancing stability and maintainability.
    #​36080 by @​vseanreesermsft
  • Merging Internal Commits for release/9.0
    Integrated internal improvements into the 9.0 branch, ensuring consistency and codebase health.
    #​36081 by @​vseanreesermsft

Infrastructure

  • Update Branding to 9.0.6
    Updated the product branding and version numbers to 9.0.6, ensuring that all assemblies and packages reflect the correct release version.
    #​36044 by @​vseanreesermsft
  • Update Branding to 8.0.17
    Updated branding for the 8.0 release line to version 8.0.17, keeping versioning consistent across all release artifacts.
    #​36043 by @​vseanreesermsft

Miscellaneous

  • [automated] Merge branch 'release/8.0' => 'release/9.0'
    Automated merge of changes from the 8.0 branch into the 9.0 branch, ensuring that all relevant fixes and improvements are carried forward.
    #​35927 by @​github-actions
  • Merge release/9.0 to release/9.0-staging
    Merged the 9.0 branch into the 9.0-staging branch, preparing for further testing and validation before final release.
    #​36051 by @​AndriySvyryd
    ... (truncated)

9.0.5

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

_Description ha...

Description has been truncated

@dependabot
chore: Bump the minor-and-patch group with 31 updates
011960e 
Bumps BenchmarkDotNet from 0.14.0 to 0.15.8
Bumps Markdig from 0.38.0 to 0.44.0
Bumps Microsoft.AspNetCore.Http.Abstractions from 2.2.0 to 2.3.9
Bumps Microsoft.AspNetCore.OpenApi from 10.0.0 to 10.0.1
Bumps Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0
Bumps Microsoft.CodeAnalysis.CSharp from 4.8.0 to 4.14.0
Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 4.8.0 to 4.14.0
Bumps Microsoft.EntityFrameworkCore.Design from 9.0.0 to 9.0.11
Bumps Microsoft.EntityFrameworkCore.Sqlite from 9.0.0 to 9.0.11
Bumps Microsoft.Extensions.Configuration from 9.0.0 to 9.0.11
Bumps Microsoft.Extensions.Configuration.Json from 9.0.0 to 9.0.11
Bumps Microsoft.Extensions.DependencyInjection from 9.0.0 to 9.0.11
Bumps Microsoft.Extensions.Hosting from 10.0.0 to 10.0.1
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1
Bumps OpenFeature from 2.2.0 to 2.11.1
Bumps OpenTelemetry from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Exporter.Console from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.13.1 to 1.14.0
Bumps OpenTelemetry.Extensions.Hosting to 1.14.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.13.0 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Http from 1.13.0 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.13.0 to 1.14.0
Bumps Polly from 8.5.0 to 8.6.5
Bumps StackExchange.Redis from 2.8.24 to 2.10.1
Bumps System.IdentityModel.Tokens.Jwt from 8.3.1 to 8.15.0
Bumps Testcontainers.Redis from 4.4.0 to 4.10.0
Bumps TinyBDD.Xunit from 0.13.0 to 0.18.1
Bumps xunit from 2.9.2 to 2.9.3
Bumps xunit.runner.visualstudio to 3.1.5
Bumps Xunit.SkippableFact from 1.5.23 to 1.5.61
Bumps YamlDotNet from 16.2.1 to 16.3.0

---
updated-dependencies:
- dependency-name: BenchmarkDotNet
  dependency-version: 0.15.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Markdig
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Http.Abstractions
  dependency-version: 2.3.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenFeature
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Polly
  dependency-version: 8.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: StackExchange.Redis
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Testcontainers.Redis
  dependency-version: 4.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: TinyBDD.Xunit
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Xunit.SkippableFact
  dependency-version: 1.5.61
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: YamlDotNet
  dependency-version: 16.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 13, 2026

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from JerrettDavis as a code owner January 13, 2026 04:43
@github-actions
Copy link

github-actions bot commented Jan 13, 2026 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/BenchmarkDotNet 0.15.8 🟢 5.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 5Found 17/30 approved changesets -- score normalized to 5
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Binary-Artifacts🟢 9binaries present in source code
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.Configuration 9.0.11 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/Microsoft.Extensions.Configuration.Json 9.0.11 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/Microsoft.Extensions.DependencyInjection 9.0.11 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 28 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing🟢 10project is fuzzed
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/Microsoft.AspNetCore.OpenApi 10.0.1 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Design 9.0.11 🟢 6.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/Microsoft.EntityFrameworkCore.Sqlite 9.0.11 🟢 6.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/System.IdentityModel.Tokens.Jwt 8.15.0 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 911 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST🟢 10SAST tool is run on all commits
nuget/Markdig 0.44.0 🟢 5.1
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 9Found 20/21 approved changesets -- score normalized to 9
Maintained🟢 1011 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 9Found 9/10 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 9Found 9/10 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.AspNetCore 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Http 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Runtime 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
License🟢 10license file detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 9Found 9/10 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Exporter.Console 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 9Found 9/10 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting 1.14.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 9Found 9/10 approved changesets -- score normalized to 9
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/Microsoft.Extensions.Hosting 10.0.1 UnknownUnknown
nuget/Microsoft.Extensions.Hosting 10.0.1 UnknownUnknown
nuget/Microsoft.Extensions.Hosting 10.0.1 UnknownUnknown
nuget/YamlDotNet 16.3.0 🟢 4.3
Details
CheckScoreReason
Code-Review🟢 3Found 3/9 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 66 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 6
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
nuget/Microsoft.AspNetCore.Http.Abstractions 2.3.9 UnknownUnknown
nuget/StackExchange.Redis 2.10.1 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 5Found 16/30 approved changesets -- score normalized to 5
Maintained🟢 109 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 5binaries present in source code
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST🟢 10SAST tool is run on all commits
nuget/Microsoft.CodeAnalysis.Analyzers 3.11.0 🟢 4.2
Details
CheckScoreReason
Token-Permissions⚠️ -1No tokens found
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 5Found 1/2 approved changesets -- score normalized to 5
Maintained🟢 32 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 3
Pinned-Dependencies⚠️ -1no dependencies found
Dangerous-Workflow⚠️ -1no workflows found
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License⚠️ 0license file not detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during GetBranch(release/7.0.1xx): error during branchesHandler.query: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
nuget/Microsoft.CodeAnalysis.CSharp 4.14.0 🟢 4.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/OpenFeature 2.11.1 UnknownUnknown
nuget/Microsoft.CodeAnalysis.Analyzers 3.11.0 🟢 4.2
Details
CheckScoreReason
Token-Permissions⚠️ -1No tokens found
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 5Found 1/2 approved changesets -- score normalized to 5
Maintained🟢 32 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 3
Pinned-Dependencies⚠️ -1no dependencies found
Dangerous-Workflow⚠️ -1no workflows found
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
License⚠️ 0license file not detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during GetBranch(release/7.0.1xx): error during branchesHandler.query: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
nuget/Microsoft.CodeAnalysis.CSharp 4.14.0 🟢 4.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/Polly 8.6.5 🟢 8
Details
CheckScoreReason
Code-Review⚠️ 2Found 1/5 approved changesets -- score normalized to 2
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
CII-Best-Practices🟢 5badge detected: Passing
SAST🟢 10SAST tool is run on all commits
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 25 contributing companies or organizations
nuget/Microsoft.Extensions.Configuration 🟢 6.6
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Vulnerabilities🟢 64 existing vulnerabilities detected
nuget/Microsoft.Extensions.DependencyInjection UnknownUnknown
nuget/Microsoft.CodeAnalysis.CSharp 4.14.0 🟢 4.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/Microsoft.CodeAnalysis.CSharp.Workspaces 4.14.0 🟢 4.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/Microsoft.NET.Test.Sdk 17.14.1 🟢 5
Details
CheckScoreReason
Maintained🟢 1023 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 6Found 12/18 approved changesets -- score normalized to 6
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 91 existing vulnerabilities detected
nuget/xunit 2.9.3 🟢 4.9
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown
nuget/Microsoft.CodeAnalysis.CSharp 4.14.0 🟢 4.5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown
nuget/Xunit.SkippableFact 1.5.61 UnknownUnknown
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown
nuget/Testcontainers.Redis 4.10.0 UnknownUnknown
nuget/TinyBDD.Xunit 0.18.1 UnknownUnknown
nuget/xunit.runner.visualstudio 3.1.5 UnknownUnknown

Scanned Files

  • benchmarks/ExperimentFramework.Benchmarks/ExperimentFramework.Benchmarks.csproj
  • samples/ExperimentFramework.AspireDemo/AspireDemo.ApiService/AspireDemo.ApiService.csproj
  • samples/ExperimentFramework.AspireDemo/AspireDemo.Blog.Plugins.Auth/AspireDemo.Blog.Plugins.Auth.csproj
  • samples/ExperimentFramework.AspireDemo/AspireDemo.Blog.Plugins.Editor/AspireDemo.Blog.Plugins.Editor.csproj
  • samples/ExperimentFramework.AspireDemo/AspireDemo.ServiceDefaults/AspireDemo.ServiceDefaults.csproj
  • samples/ExperimentFramework.ComprehensiveSample/ExperimentFramework.ComprehensiveSample.csproj
  • samples/ExperimentFramework.FeatureFlagDemo/ExperimentFramework.FeatureFlagDemo.csproj
  • samples/ExperimentFramework.ResilienceDemo/ExperimentFramework.ResilienceDemo.csproj
  • samples/ExperimentFramework.ScientificDemo/ExperimentFramework.ScientificDemo.csproj
  • src/ExperimentFramework.Configuration/ExperimentFramework.Configuration.csproj
  • src/ExperimentFramework.Dashboard.Abstractions/ExperimentFramework.Dashboard.Abstractions.csproj
  • src/ExperimentFramework.Distributed.Redis/ExperimentFramework.Distributed.Redis.csproj
  • src/ExperimentFramework.Generators/ExperimentFramework.Generators.csproj
  • src/ExperimentFramework.OpenFeature/ExperimentFramework.OpenFeature.csproj
  • src/ExperimentFramework.Plugins.Generators/ExperimentFramework.Plugins.Generators.csproj
  • src/ExperimentFramework.Resilience/ExperimentFramework.Resilience.csproj
  • src/ExperimentFramework/ExperimentFramework.csproj
  • tests/ExperimentFramework.Generators.Tests/ExperimentFramework.Generators.Tests.csproj
  • tests/ExperimentFramework.Plugins.Generators.Tests/ExperimentFramework.Plugins.Generators.Tests.csproj
  • tests/ExperimentFramework.Plugins.Tests/ExperimentFramework.Plugins.Tests.csproj
  • tests/ExperimentFramework.Tests/ExperimentFramework.Tests.csproj

@JerrettDavis JerrettDavis requested a review from Copilot January 13, 2026 05:45
Copilot AI reviewed Jan 13, 2026
View reviewed changes
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates 31 package dependencies in the minor-and-patch dependency group, bringing various libraries up to their latest compatible versions. The updates include significant version bumps for testing frameworks, observability libraries, and Microsoft extensions packages.

Changes:

  • Updated core testing and observability libraries (BenchmarkDotNet 0.14.0→0.15.8, OpenTelemetry 1.12.0→1.14.0, Markdig 0.38.0→0.44.0)
  • Upgraded Microsoft.Extensions packages from 9.0.0/9.0.11 to 10.0.1 and Microsoft.AspNetCore packages
  • Updated Entity Framework Core packages from 9.0.0 to 9.0.11
  • Modernized development dependencies including test runners, code analysis tools, and container testing libraries

Reviewed changes

Copilot reviewed 23 out of 23 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
benchmarks/ExperimentFramework.Benchmarks/ExperimentFramework.Benchmarks.csproj Updates BenchmarkDotNet to 0.15.8 and Microsoft.Extensions packages to 9.0.11
samples/ExperimentFramework.AspireDemo/AspireDemo.ApiService/AspireDemo.ApiService.csproj Updates Microsoft.AspNetCore.OpenApi to 10.0.1 and Entity Framework Core to 9.0.11
samples/ExperimentFramework.AspireDemo/AspireDemo.Blog.Plugins.Auth/AspireDemo.Blog.Plugins.Auth.csproj Updates System.IdentityModel.Tokens.Jwt to 8.15.0
samples/ExperimentFramework.AspireDemo/AspireDemo.Blog.Plugins.Editor/AspireDemo.Blog.Plugins.Editor.csproj Updates Markdig to 0.44.0
samples/ExperimentFramework.AspireDemo/AspireDemo.ServiceDefaults/AspireDemo.ServiceDefaults.csproj Updates OpenTelemetry packages to 1.14.0
samples/ExperimentFramework.ComprehensiveSample/ExperimentFramework.ComprehensiveSample.csproj Updates Microsoft.Extensions.Hosting and OpenTelemetry packages
samples/ExperimentFramework.FeatureFlagDemo/ExperimentFramework.FeatureFlagDemo.csproj Updates Microsoft.Extensions.Hosting to 10.0.1
samples/ExperimentFramework.ResilienceDemo/ExperimentFramework.ResilienceDemo.csproj Updates Microsoft.Extensions.Hosting to 10.0.1
samples/ExperimentFramework.SampleConsole/packages.lock.json Reflects transitive dependency updates from core ExperimentFramework changes
samples/ExperimentFramework.ScientificDemo/ExperimentFramework.ScientificDemo.csproj Updates Microsoft.Extensions.Hosting to 10.0.1
src/ExperimentFramework.Configuration/ExperimentFramework.Configuration.csproj Updates YamlDotNet to 16.3.0
src/ExperimentFramework.Dashboard.Abstractions/ExperimentFramework.Dashboard.Abstractions.csproj Updates Microsoft.AspNetCore.Http.Abstractions to 2.3.9
src/ExperimentFramework.Distributed.Redis/ExperimentFramework.Distributed.Redis.csproj Updates StackExchange.Redis to 2.10.1
src/ExperimentFramework.Generators/ExperimentFramework.Generators.csproj Updates Roslyn packages to 4.14.0 and Microsoft.CodeAnalysis.Analyzers to 3.11.0
src/ExperimentFramework.OpenFeature/ExperimentFramework.OpenFeature.csproj Updates OpenFeature to 2.11.1
src/ExperimentFramework.Plugins.Generators/ExperimentFramework.Plugins.Generators.csproj Updates Roslyn packages to 4.14.0 and analyzers to 3.11.0
src/ExperimentFramework.Resilience/ExperimentFramework.Resilience.csproj Updates Polly to 8.6.5
src/ExperimentFramework/ExperimentFramework.csproj Adds Microsoft.Extensions.Configuration 9.0.11 and Microsoft.Extensions.DependencyInjection 9.0.11
tests/ExperimentFramework.Generators.Tests/ExperimentFramework.Generators.Tests.csproj Updates test SDK and xunit runners
tests/ExperimentFramework.Plugins.Generators.Tests/ExperimentFramework.Plugins.Generators.Tests.csproj Updates Roslyn and test packages
tests/ExperimentFramework.Plugins.Tests/ExperimentFramework.Plugins.Tests.csproj Updates xunit.runner.visualstudio to 3.1.5 and Xunit.SkippableFact to 1.5.61
tests/ExperimentFramework.Tests/ExperimentFramework.Tests.csproj Updates TinyBDD.Xunit to 0.18.1, xunit.runner to 3.1.5, and Testcontainers.Redis to 4.10.0
tests/ExperimentFramework.Tests/packages.lock.json Reflects updated transitive dependencies including OpenTelemetry, StackExchange.Redis, and testing frameworks

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@JerrettDavis
Update src/ExperimentFramework/ExperimentFramework.csproj
572f37e 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@JerrettDavis
Copy link
Owner

JerrettDavis commented Jan 13, 2026

@copilot correct ci build issues.

Copy link
Contributor

Copilot AI commented Jan 13, 2026

@JerrettDavis I've opened a new pull request, #51, to work on those changes. Once the pull request is ready, I'll request review from you.

Copilot AI mentioned this pull request Jan 13, 2026
Closed
21 tasks
@JerrettDavis JerrettDavis merged commit 2f6c326 into main Jan 13, 2026
3 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/benchmarks/ExperimentFramework.Benchmarks/minor-and-patch-6aade5beed branch January 13, 2026 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@JerrettDavis JerrettDavis JerrettDavis approved these changes

Assignees

No one assigned

Labels

area: benchmarks area: core area: samples area: tests configuration dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Cosmos/FTS: update translation of FullTextScore to use multiple keywords rather than keyword array

2 participants

@JerrettDavis