Bump the dependencies group with 16 updates

[dependabot]

Updated FluentValidation from 12.1.1 to 12.2.0.

Release notes

Sourced from FluentValidation's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

• Add Lithuanian language (#​2350)
• Add Belarusian language (#​2356)
• Add GetParentChain() to PropertyChain (#​2358)
• Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#​2362)
• Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#​2370)
• Change EnumValidator to work under native AOT (#​2371)
• Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#​2372)
• Fix PropertyPath is incorrect in .When() on RuleForEach (#​2363)

Changes in 12.1.0

• Add Tamil language (#​2334)
• Add Telugu language (#​2333)
• Fixes to Japanese translations (#​2340)

Changes in 12.0.0

• Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
• Add support for dependent rules for custom rules (#​2170)
• Removes deprecated DI extensions
• Removes deprecated transform methods (#​2027)
• Remove the ability to disable the root-model null check (#​2069)
• Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
• Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

• FluentValidation - Main package

Commits viewable in compare view.

Updated FluentValidation.DependencyInjectionExtensions from 12.1.1 to 12.2.0.

Release notes

Sourced from FluentValidation.DependencyInjectionExtensions's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

• Add Lithuanian language (#​2350)
• Add Belarusian language (#​2356)
• Add GetParentChain() to PropertyChain (#​2358)
• Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#​2362)
• Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#​2370)
• Change EnumValidator to work under native AOT (#​2371)
• Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#​2372)
• Fix PropertyPath is incorrect in .When() on RuleForEach (#​2363)

Changes in 12.1.0

• Add Tamil language (#​2334)
• Add Telugu language (#​2333)
• Fixes to Japanese translations (#​2340)

Changes in 12.0.0

• Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
• Add support for dependent rules for custom rules (#​2170)
• Removes deprecated DI extensions
• Removes deprecated transform methods (#​2027)
• Remove the ability to disable the root-model null check (#​2069)
• Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
• Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

• FluentValidation - Main package

Commits viewable in compare view.

Updated HtmlAgilityPack from 1.12.4 to 1.13.1.

Release notes

Sourced from HtmlAgilityPack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

• Fix TRX logger mangling astral-plane (non-BMP) characters by @​azat-msft in Fix TRX logger mangling astral-plane (non-BMP) characters microsoft/vstest#16318
• Disable the MTP testhost by default by @​nohwnd in Disable the MTP testhost by default microsoft/vstest#16337
• Fix OS-blind apphost probe in MTP bridge on Unix (regression from #​16201) by @​azat-msft in Fix OS-blind apphost probe in MTP bridge on Unix (regression from #16201) microsoft/vstest#16336
• Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources by @​nohwnd in Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources microsoft/vstest#16300
• Pass arguments to PowerShell with -File instead of -command by @​nohwnd in Pass arguments to PowerShell with -File instead of -command microsoft/vstest#16363
• Respect console logger verbosity from a settings file by @​nohwnd in Respect console logger verbosity from a settings file microsoft/vstest#16044
• Fix backslash normalization in VSTestCLIRunSettings on Unix by @​nohwnd in [fix] Fix backslash normalization in VSTestCLIRunSettings on Unix microsoft/vstest#15795
• Docs: fix typo explicitely -> explicitly by @​vaibhav8a in docs: fix typo explicitely -> explicitly microsoft/vstest#16397
• Copy acceptance test diagnostic logs into the test results directory by @​nohwnd in Copy acceptance test diagnostic logs into the test results directory microsoft/vstest#16403

New Contributors

• @​vaibhav8a made their first contribution in docs: fix typo explicitely -> explicitly microsoft/vstest#16397

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

Commits viewable in compare view.

Updated MimeKit from 4.17.0 to 4.18.1.

Release notes

Sourced from MimeKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.7.0 to 8.8.0.

Release notes

Sourced from Polly's releases.

8.8.0

Highlights

• Add EnableReloadsWithMonitor() accepting custom IOptionsMonitor by @​arashzjahangiri in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
• Return null from FaultGenerator when no fault is generated by @​dualfroz in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

What's Changed

• Update workflow timeout by @​martincostello in Update workflow timeout App-vNext/Polly#3106
• Set SOURCE_DATE_EPOCH by @​martincostello in Set SOURCE_DATE_EPOCH App-vNext/Polly#3115
• Use NUGET_API_KEY by @​martincostello in Use NUGET_API_KEY App-vNext/Polly#3116
• Test refactoring by @​martincostello in Test refactoring App-vNext/Polly#3132
• Avoid test flakiness by @​martincostello in Avoid test flakiness App-vNext/Polly#3134
• Group github/codeql-action updates by @​martincostello in Group github/codeql-action updates App-vNext/Polly#3147
• Fix wrong word in hedging documentation by @​latent-9 in Fix wrong word in hedging documentation App-vNext/Polly#3191
• OSMF sponsorship notice by @​joelhulen in OSMF sponsorship App-vNext/Polly#3194
• Fix XML doc comment on PipelineExecutedArguments by @​JiuYue0820 in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
• Update to xunit v3 by @​martincostello in Update to xunit v3 App-vNext/Polly#3131
• .NET 11 preparation by @​martincostello in .NET 11 preparation App-vNext/Polly#3225
• Fix flaky test by @​martincostello in Fix flaky test App-vNext/Polly#3231

New Contributors

• @​arashzjahangiri made their first contribution in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
• @​latent-9 made their first contribution in Fix wrong word in hedging documentation App-vNext/Polly#3191
• @​JiuYue0820 made their first contribution in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
• @​dualfroz made their first contribution in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.11 to 2.18.0.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: .NET, dependencies, packages. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 86040607-4c3a-417c-b533-67f69b7c43c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[guibranco]

Automatically approved by gstraccini[bot]

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	microsoft.extensions.logging.abstractions@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.dependencyinjection.abstractions@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.options@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.configuration@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.configuration.environmentvariables@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.configuration.json@​10.0.9 ⏵ 10.0.13
	microsoft.extensions.options.configurationextensions@​10.0.9 ⏵ 10.0.13
	fluentvalidation@​12.1.1 ⏵ 12.2.0
	fluentvalidation.dependencyinjectionextensions@​12.1.1 ⏵ 12.2.0
	microsoft.extensions.diagnostics.healthchecks.entityframeworkcore@​10.0.9 ⏵ 10.0.13
	scalar.aspnetcore@​2.16.11 ⏵ 2.18.0
	mimekit@​4.17.0 ⏵ 4.18.1
	polly@​8.7.0 ⏵ 8.8.0
	microsoft.net.test.sdk@​18.10.1 ⏵ 18.11.0
	xunit.runner.visualstudio@​4.0.0 ⏵ 4.0.1
	htmlagilitypack@​1.12.4 ⏵ 1.13.1

View full report

[socket-security]

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Priority	Alert  (click "▶" to expand/collapse)	Action
	System shell access: nuget polly.core Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 → nuget/polly.core@8.8.0 ℹ Read more on: This package | This alert | What is shell access? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly.core@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block
	Dynamic code execution: nuget polly.core Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 → nuget/polly.core@8.8.0 ℹ Read more on: This package | This alert | What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly.core@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block
	Dynamic code execution: nuget polly Location: Package overview From: src/DaftAlerts.Infrastructure/DaftAlerts.Infrastructure.csproj → nuget/polly@8.8.0 ℹ Read more on: This package | This alert | What is dynamic code execution? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/polly@8.8.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block

View full report

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud