chore(deps): update nuget packages (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
AWSSDK.Core	3.7.500.80 → 4.0.9.5
AWSSDK.S3	3.7.510.6 → 4.0.25.1
AWSSDK.SQS	3.7.502.39 → 4.0.3.6
AWSSDK.SecurityToken	3.7.504.32 → 4.0.7.6
AspNetCore.HealthChecks.MongoDb	8.1.0 → 9.0.0
Calzolari.Grpc.AspNetCore.Validation	9.0.0 → 10.1.0
JetBrains.Annotations (source)	2025.2.4 → 2026.2.0
Microsoft.AspNetCore.TestHost (source)	8.0.24 → 10.0.9
Microsoft.Extensions.Diagnostics.HealthChecks (source)	8.0.24 → 10.0.9
StackExchange.Redis (source)	2.11.0 → 3.0.0
coverlet.collector	8.0.0 → 10.0.1

---

Release Notes

aws/aws-sdk-net (AWSSDK.Core)

v4.0.9

v4.0.8

v4.0.7

v4.0.6

Compare Source

v4.0.5

Compare Source

v4.0.4

v4.0.3

Compare Source

v4.0.2

v4.0.1

v4.0.0

JetBrains/JetBrains.Annotations (JetBrains.Annotations)

v2026.2.0

Compare Source

dotnet/dotnet (Microsoft.AspNetCore.TestHost)

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

v10.0.3

v10.0.2

v10.0.1

v9.0.7: .NET 9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.6: .NET 9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.5: .NET 9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.4: .NET 9.0.4

You can build .NET 9.0 from the repository by cloning the release tag v9.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.3: .NET 9.0.3

You can build .NET 9.0 from the repository by cloning the release tag v9.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.2: .NET 9.0.2

You can build .NET 9.0 from the repository by cloning the release tag v9.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.1: .NET 9.0.1

You can build .NET 9.0 from the repository by cloning the release tag v9.0.1 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.0: .NET 9.0.0

You can build .NET 9.0 from the repository by cloning the release tag v9.0.0 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

StackExchange/StackExchange.Redis (StackExchange.Redis)

v3.0.0

3.0.0 represents an overhaul of the internal IO logic, for both performance and stability reasons.

Intentionally, there are no^† API changes in this release; it is a direct mirror of 2.13.17, but with the new IO core.

^† addendum, one change discovered:

• Execute[Async] now detects and respects "admin" commands, i.e. those protected by AllowAdmin; for example, in 2.x, db.Execute("FLUSHALL"); would work even if AllowAdmin was not enabled - this will now throw at the client without issuing the command to the server

What is the aim of the internals rewrite?

SE.Redis v2 made use of a few concepts internally:

• the "pipelines" IO layer from System.IO.Pipelines, via Pipelines.Sockets.Unoficial
• a DOM-based parser built on top of a custom arena allocator

v3 fundamentally revises these engineering decisions:

• IO and buffer control is taken back directly into the library, allowing for greater control of IO boundaries and the threading model
• the parser is re-written as a reader-based implementation

This allows for significant performance improvement, especially when processing large / complex results - for example, if we use the LRANGE_600 test from redis-benchmark (or resp-benchmark):

### classic SE.Redis 2.13.17.28173 ###
LRANGE_600:     7,579 requests per second
LRANGE_600:     7,554 requests per second
LRANGE_600:     7,284 requests per second
LRANGE_600:     7,158 requests per second
LRANGE_600:     7,174 requests per second

vs

### classic SE.Redis 3.0.0.11234 ###
LRANGE_600:     16,408 requests per second
LRANGE_600:     17,681 requests per second
LRANGE_600:     17,331 requests per second
LRANGE_600:     17,317 requests per second
LRANGE_600:     16,665 requests per second

(for tests with simpler results, like INCR, results of over 1M requests per second are achievable)

---

3.0 is the first part of a wave of planned IO work; 3.1 will revise the "write" part of the write loop, moving message serialization out of the critical serialized core of the multiplexer. All of this work is based on extensive prototyping and benchmarking, demonstrating that these approaches, when combined, provide significant throughput and stability improvements.

This release has undergone extensive testing. If you experience problems, please let us know!

v2.13.10

Compare Source

This release is marked inactive due to a critical bug when using TCP keep-alives on DNS (i.e. named, not IP) endpoints; this is specific to non-Windows platforms, before .NET 10. See #​3086 and #​3090

---

What's Changed

• Fix incorrect routing of some sorted-set and stream commands by @​mgravell in #​3080
• ConfigurationOptions: don't serialize (ToString()) or clone Protocol if it comes from the defaults-provider by @​mgravell in #​3082
• enable TCP keep-alives by @​mgravell in #​3078
• Move CI to 8.8 rc1 by @​mgravell in #​3079
• Draft support for 8.8 arrays by @​mgravell in #​3076

Full Changelog: StackExchange/StackExchange.Redis@2.13.1...2.13.10

v2.13.1

Compare Source

IMPORTANT: This release changes the default protocol from RESP2 to RESP3 for Azure Managed Redis endpoints (only); this
has scalability and feature advantages, but if you are using modules or ad-hoc commands, please see the RESP3 notes, which includes:

• the purpose of RESP3
• scenarios where RESP2 vs RESP3 may be visible
• how to explicitly choose to remain on RESP2
• notes on additional libraries such as NRedisStack

What's Changed

• Prefer RESP3 for Azure Managed Redis endpoints (#​3067 by @​mgravell)

Full Changelog: StackExchange/StackExchange.Redis@2.12.27...2.13.1

v2.12.14

Compare Source

What's Changed

Impact: "high" if using cluster and high-integrity-mode together (resolves an issue that can mis-report -MOVED responses as integrity failures)

• Resolve critical failure in high-integrity-mode with -MOVED response by @​mgravell in #​3049
• Allow heartbeat to restart the pipe thread with only sync commands by @​frobion in #​2965
• GitHubActions logger; exclude passed/skipped by @​mgravell in #​3045

NuGet link

New Contributors

• @​frobion made their first contribution in #​2965

Full Changelog: StackExchange/StackExchange.Redis@2.12.8...2.12.14

v2.12.8

Compare Source

What's Changed

• Filter out 'temporary placeholder' cluster nodes with a handshake flag by @​TimLovellSmith in #​3043
• Support multi-DB cluster usage on valkey by @​mgravell in #​3040
• Implement GRCA by @​mgravell in #​3041

Full Changelog: StackExchange/StackExchange.Redis@2.12.4...2.12.8

v2.12.4

Compare Source

What's Changed

• Improve detection of connect/handshake failures and how that impacts the retry-policy by @​mgravell in #​3038
• Fix RESP3 client handshakes on non-RESP3 servers by @​mgravell in #​3037

Full Changelog: StackExchange/StackExchange.Redis@2.12.1...2.12.4

v2.12.1

Compare Source

What's Changed

• Add missing LCS outputs and missing RedisType.VectorSet (#​3028 by @​mgravell)
• Track and report multiplexer count (#​3030 by @​mgravell)
• (docs) Add Entra ID authentication docs (#​3023 by @​philon-msft)
• (eng) Improve test infrastructure (toy-server) (#​3021 by @​mgravell, #​3022 by @​mgravell, #​3027 by @​mgravell, #​3028 by @​mgravell)
• (eng) Pre-V2 work: bring RESPite down, toy-server, migrate to AsciiHash (#​3028 by @​mgravell)

Full Changelog: StackExchange/StackExchange.Redis@2.11.8...2.12.1

v2.11.8

Compare Source

What's Changed

• Handle -MOVED error pointing to same endpoint. by @​barshaul in #​3003
• fix time conversion error in HOTKEYS by @​mgravell in #​3017
• (engineering) stabilize -MOVED test by @​mgravell in #​3020

New Contributors

• @​barshaul made their first contribution in #​3003

Full Changelog: StackExchange/StackExchange.Redis@2.11.3...2.11.8

v2.11.3

Compare Source

What's Changed

• Fix potential null-ref in azure maintenance event handler by @​mgravell in #​3013
• (docs) Add VRANGE support by @​mgravell in #​3011
• (docs) Add CAS/CAD docs by @​mgravell in #​3012

Full Changelog: StackExchange/StackExchange.Redis@2.11.0...2.11.3

coverlet-coverage/coverlet (coverlet.collector)

v10.0.1

Improvements

• Coverlet with MTP 2 doesn't show test coverage statistic in console #​1907
• Avoid unnecessary testhost restarts #​1912 by https://github.com/mawosoft

Fixed

• Fix inconsistent paths in cobertura reports #​1723
• Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
• Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
• Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

• Add architecture docs and diagrams for all integrations #​1927
• Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

v10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

v8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud