Skip to content

chore(deps): Bump AngleSharp and 15 others - #64

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-779eea1ded
Closed

chore(deps): Bump AngleSharp and 15 others#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/BrassLedger.Api.Tests/routine-updates-779eea1ded

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Updated AngleSharp from 1.5.0 to 1.8.6.

Release notes

Sourced from AngleSharp's releases.

1.8.6

Released on Sunday, October 25 2026

What's Changed

  • Removed temporary copies when serializing text that needs no HTML escaping @​perfloop-agent in Avoid rebuilding unescaped text during HTML serialization AngleSharp/AngleSharp#1388
  • Fixed INode.Equals (isEqualNode) to compare what the DOM spec compares: character data, doctype identifiers, processing instructions, element prefixes and attribute local names, no longer base URLs, without overflowing the stack on deep trees
  • Fixed IAttr.Equals comparing the prefix instead of the local name
  • Fixed IDocument.Import (importNode) returning nodes owned by the source document instead of the importing one
  • Fixed IDocument.Import accepting a shadow root instead of throwing NotSupported
  • Fixed INode.Clone and Import overflowing the stack on deeply nested trees and templates
  • Fixed a shallow clone of a <template> copying its contents
  • Fixed serializing < and > in attribute values unescaped, which let markup break out when reparsed under different rules (mutation XSS); they are now written as &lt; and &gt; like browsers do since the HTML spec change of May 2025
  • Fixed IRange.CopyContent and ExtractContent overflowing the stack on deeply nested ranges
  • Fixed Dispatch (dispatchEvent) returning true for a canceled event
  • Fixed MutationObserver not observing a document itself and throwing for one without a root element
  • Fixed MutationObserver.Disconnect keeping the previous targets for a later Connect
  • Fixed a failing navigation or submission from DoClick crashing the process; it is reported as a context error
  • Fixed URLSearchParams treating non-ASCII values as single bytes and leaving + undecoded @​NotAFlightRisk in Decode URLSearchParams as UTF-8 and treat + as a space AngleSharp/AngleSharp#1390
  • Added the IHtmlSelectElement.SelectedIndex setter
  • Added HtmlParserOptions.MaximumDepth (default 512) to stop deeply nested markup from building trees that overflow the stack
  • Added focusing of elements with a tabindex and blurring of any focused element
  • Added DoClickAsync to await a click's navigation or form submission
  • Added toggling the parent <details> when clicking its <summary>
  • Added declarative shadow DOM: the parser attaches <template shadowrootmode="open"> (or closed) as the shadow root of its parent
  • Added :host(<compound>), and selectors in a shadow tree reaching its host (only through :host)
  • Released 1.8.6 by @​FlorianRappl in Release 1.8.6 AngleSharp/AngleSharp#1391

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.5...v1.8.6

1.8.5

Released on Thursday, October 15 2026

What's Changed

  • Fixed select selectedness and option dirtiness across mutations, reset and cloning (#​1384) @​PrzemyslawKlys
  • Fixed fragment parsing losing the context document's quirks and limited-quirks modes (#​1382) @​PrzemyslawKlys
  • Fixed :lang() inheritance and namespace precedence in HTML and foreign content (#​1379) @​PrzemyslawKlys
  • Fixed URLSearchParams cutting values at a second = such as token=abc== (#​1385) @​NotAFlightRisk
  • Released 1.8.5 by @​FlorianRappl in Release 1.8.5 AngleSharp/AngleSharp#1386

Full Changelog: AngleSharp/AngleSharp@v1.8.4...v1.8.5

1.8.4

Released on Wednesday, October 7 2026

What's Changed

  • Improved selection when parsing <select> (#​1364) @​PrzemyslawKlys
  • Updated constraint validation eligibility of fieldset and output elements (breaking behavior change) (#​1373) @​PrzemyslawKlys
  • Fixed change of <select> value (IsSelected) (#​1365) @​PrzemyslawKlys
  • Fixed indeterminate input state when cloning (#​1367) @​PrzemyslawKlys
  • Fixed <select> form submission including unselected options and options in disabled groups (#​1366) @​PrzemyslawKlys
  • Fixed option indexes inside option groups (#​1368) @​PrzemyslawKlys
  • Fixed selecting an option leaving other single-select options selected (#​1372) @​PrzemyslawKlys
  • Fixed validity checks for controls excluded from validation (#​1370) @​PrzemyslawKlys
  • Fixed template content document when adopting a subtree (#​1374) @​PrzemyslawKlys
  • Fixed checking a radio leaving other group members checked (#​1371) @​PrzemyslawKlys
  • Fixed parsed radio checkedness depending on attribute order @​PrzemyslawKlys
  • Fixed SVG annotation-xml elements being treated as HTML integration points @​NotAFlightRisk
  • Fixed required radio validation across group members (#​1369) @​PrzemyslawKlys
  • Released 1.8.4 by @​FlorianRappl in Release 1.8.4 AngleSharp/AngleSharp#1377

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.3...v1.8.4

1.8.3

Released on Wednesday, September 30 2026

What's Changed

  • Improved cancellation of queued timer callbacks (#​1357) @​PrzemyslawKlys
  • Improved configuration / setup performance (#​1360) @​PrzemyslawKlys
  • Fixed form submission ignoring sandbox restrictions (#​1358) @​PrzemyslawKlys
  • Fixed <base> elements not following frozen document base URL and tree-order mutation rules (#​1355, #​1362)
  • Fixed native Unloading handlers subscribing to unloading instead of beforeunload (#​1354) @​PrzemyslawKlys
  • Added OnReset event to inform script hosts of native listener removals (#​1356) @​PrzemyslawKlys
  • Added pull-based HTML serialization stream (#​1361) @​PrzemyslawKlys
  • Released 1.8.3 by @​FlorianRappl in Release 1.8.3 AngleSharp/AngleSharp#1363

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.2...v1.8.3

1.8.2

Released on Friday, September 18 2026

What's Changed

  • Improved attribute selector serialization to write only the case-sensitivity modifier that was specified (#​1351)
  • Improved id/name lookup on collections (document.forms["x"], form.elements["x"], ...) to enumerate the underlying sequence once instead of twice
  • Improved performance of form.elements / fieldset.elements by walking the tree directly (#​1350)
  • Improved GetElementsByTagName / GetElementsByClassName traversal to stop double-scanning each element's children
  • Improved selector specificity (Selectors.Specificity, ComplexSelector.Specificity) to be computed once instead of recomputed on every read
  • Improved ListSelector.GetMatchingSelector to sort its selectors once instead of on every call
  • Improved performance of HTML tree construction by keeping mutation logic out of it (#​1347)
  • Improved performance of DOM mutations by building a mutation record only when an observer will consume it (#​1347)
  • Improved performance of parser attribute duplication check
  • Fixed Document.Forms allocating a new collection instance per read, contradicting its own [DomSameObject] contract
  • Fixed classList and the other reflected token lists writing their content attribute without running the attribute change steps or queueing a mutation record
  • Fixed clearing a reflected boolean attribute such as disabled removing it without running the attribute change steps or queueing a mutation record
  • Fixed vulnerability via SVG style serialization (GHSA-cgp3-27rh-pcp2)
  • Fixed a StackOverflowException when parsing a document with deeply nested unclosed <template> elements
  • Added Document.MutationVersion, a synchronous counter of DOM mutations that a parse leaves unchanged (#​1344, #​1347)
  • Released 1.8.2 by @​FlorianRappl in Release 1.8.2 AngleSharp/AngleSharp#1353

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.1...v1.8.2

1.8.1

Released on Thursday, September 10 2026

What's Changed

  • Updated DoFocus and DoBlur to apply to form elements
  • Improved explicit form ownership to take precedence over ancestor forms for connected controls (#​1323) @​sebastienros
  • Fixed HTML hyperlink pseudo-classes omitting empty href and matching link elements (#​1337) @​sebastienros
  • Fixed HTML-namespace element creation losing local-name case (#​1327) @​sebastienros
  • Fixed :enabled incorrectly matching HTML links with nonempty href (#​1324) @​sebastienros
  • Fixed changing focus of elements
  • Released 1.8.1 by @​FlorianRappl in Release 1.8.1 AngleSharp/AngleSharp#1343

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.0...v1.8.1

1.8.0

Released on Saturday, September 5 2026

What's Changed

  • Improved AngleSharp's test website
  • Fixed script data escaped state potentially not bouncing back correctly
  • Added the DomSameObject annotation for the respective IDL members (#​1314) @​lahma
  • Added the DomReturnType annotation for methods returning a different IDL type (#​1318)
  • Released 1.8.0 by @​FlorianRappl in Release 1.8.0 AngleSharp/AngleSharp#1317

Full Changelog: AngleSharp/AngleSharp@v1.7.3...v1.8.0

1.7.3

Released on Thursday, September 3 2026

What's Changed

  • Improved tracking of parse exceptions in the HtmlParser (#​1315) @​lahma
  • Fixed tokenizer buffer overrun on encoding change (#​1290) @​jafin
  • Fixed selector text dropping the nth-child of clause (#​1292) @​jafin
  • Fixed selector text dropping the case-insensitive (#​1291) @​jafin
  • Fixed selector specificity carrying between fields instead of saturating (#​1300) @​meziantou
  • Fixed condition check for disposed state in ReturnToPool (#​1296) @​meziantou
  • Fixed ArgumentOutOfRangeException CSS escapes (#​1299) @​meziantou
  • Fixed whitespace around An+B CSS selector notations (#​1297)
  • Fixed unsupported pseudo-classes matching everything (#​1295)
  • Fixed DomException for invalid foreign attribute names such as xml:lang[ (#​1294)
  • Fixed script data escaped state leaving escaped mode too early (#​1298)
  • Fixed CurrentScript not indicating the currently executing script (#​1308) @​lahma
  • Fixed returned missing attribute-properties to use empty string instead of null (#​1313) @​lahma
  • Fixed removal of data-* attributes (#​1310) @​lahma
  • Added missing DomName/DomAccessor annotations (#​1301) @​meziantou
  • Added missing DomLiterals attribute to AdjacentPosition (#​1311) @​lahma
  • Released 1.7.3 by @​FlorianRappl in Release 1.7.3 AngleSharp/AngleSharp#1302

Full Changelog: AngleSharp/AngleSharp@v1.7.2...v1.7.3

1.7.2

Released on Sunday, August 23 2026

What's Changed

  • Fixed matching of annotation-xml encoding to be case-insensitive (#​1284) @​arpitjain099
  • Fixed <xmp> usage in <select> elements
  • Added ability to parse immutable byte buffers without a stream (#​1286) @​dv00d00
  • Released 1.7.2 by @​FlorianRappl in Release 1.7.2 AngleSharp/AngleSharp#1288

New Contributors

Full Changelog: AngleSharp/AngleSharp@1.7.1...v1.7.2

1.7.1

Released on Wednesday, August 5 2026

  • Migrated the build system from NUKE to Fallout by @​jafin in Migrate the build system from NUKE to Fallout AngleSharp/AngleSharp#1275
  • Improved WHATWG Url specification (#​802) @​jafin
  • Improved tokenizer read performance (#​1274) @​dv00d00
  • Fixed auxiliary browsing context lifetime (#​1278) @​jafin
  • Fixed duplicated DomName attributes on DOM geometry
  • Fixed document.open() destroying the DOM tree in case of encoding problems (#​1276)
  • Fixed source references having wrong line (#​1280)
  • Released 1.7.1 by @​FlorianRappl in Release 1.7.1 AngleSharp/AngleSharp#1281

Full Changelog: AngleSharp/AngleSharp@1.7.0...v1.7.1

1.7.0

Released on Friday, July 31 2026

  • Improved CSS selector performance (#​1270, #​929) @​lahma
  • Added support for the :host pseudo selector (#​1271)
  • Added support for the DomGeometry spec (#​1193)

1.6.0

Released on Sunday, July 26 2026

  • Improved performance for text tokenization (#​1262) @​dv00d00
  • Improved CSS selector performance
  • Improved observer dispatch during HTML parsing (#​1266) @​dv00d00
  • Improved declaration of unsupported pseudo elements
  • Fixed inconsistent behavior and segfaults on Android Release build (#​1252) @​DevGitPit
  • Fixed CSS attribute selector modifier handling for i / I (case-insensitive) and s / S (case-sensitive)
  • Added API enhancements to expose asynchronous HTML token source (#​1265) @​dv00d00
  • Added bounded stream parsing mode (#​1263) @​dv00d00
  • Added canonicalization of decimal, octal, or hexadecimal IPv4 literals in Url
  • Added parsing of / checks for IPv6 literals in Url
  • Added support for the CSS column combinator (||) selector syntax
  • Added correct identification of CurrentSource in CssMediaElement

1.5.2

Released on Sunday, July 5 2026

  • Fixed NodeIterator pre-removing steps to use the first following node (#​1260) @​ivandrofly
  • Fixed Range.IsCollapsed to also compare offsets (#​1259) @​ivandrofly
  • Fixed swapped comparison in Range.CompareBoundaryTo (#​1258) @​ivandrofly
  • Fixed Range.CopyContent to follow the DOM Standard (#​1257) @​ivandrofly
  • Fixed Range.ExtractContent to follow the DOM Standard (#​1256) @​ivandrofly
  • Added missing media attribute change detection on SVG style elements (#​1261) @​ivandrofly

Commits viewable in compare view.

Updated bunit from 1.31.3 to 1.40.0.

Release notes

Sourced from bunit's releases.

1.40.0

Fixed

  • Aligned Microsoft packages to their TFM version

1.39.5

Fixed

  • Do not set the Uri or BaseUri property on the FakeNavigationManager if navigation is prevented by a handler on net7.0 or greater. Reported and fixed by @​ayyron-dev in #​1647
  • Use default renderer properties for AngleSharp. Reported by @​jtleaming in [#​1692].
  • FindComponents throws an exception, when a base and derived class was searched for. Reported by @​BlueDragon709 in [#​1691].

1.38.5

Added

  • Added support for xunit v3 in the bunit.template. By @​linkdotnet.

1.37.7

Added

  • Added support for RendererInfo and AssignedRenderMode (.net9.0).

1.36.0

Added

  • Bumped .NET 9 version dependencies to stable packages.

1.35.3

Added

  • Extension packages (bunit.generators and bunit.web.query) are flagged as stable.

1.34.0

Fixed

1.33.3

Added

  • bunit.generators respect parameters from the base class.
  • Supports components using constructor injection in net9.0.

Fixed

  • Use latest System.Text.Json due to CVE in 8.0.4.

1.32.7

Fixed

  • Ensure that a check in WaitForAssertion and related methods is always performed at once before the wait timer is started. If not, the timeout could occure before a wait-for check-condition had been attempted, causing tests to fail without reason. Fixed by @​egil.

Commits viewable in compare view.

Updated coverlet.collector from 6.0.2 to 6.0.4.

Release notes

Sourced from coverlet.collector's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

Commits viewable in compare view.

Pinned MailKit at 4.18.2.

Release notes

Sourced from MailKit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.33.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.32

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.31...v8.0.32

8.0.31

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.33.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

8.0.32

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.31...v8.0.32

8.0.31

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

New Contributors

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 8.0.30 to 8.0.33.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

8.0.32

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.31...v8.0.32

8.0.31

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.30...v8.0.31

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 8.0.30 to 8.0.33.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

8.0.32

Release

What's Changed

Description has been truncated

@dependabot
chore(deps): Bump AngleSharp and 15 others
3775d66 
Bumps AngleSharp from 1.5.0 to 1.8.6
Bumps bunit from 1.31.3 to 1.40.0
Bumps coverlet.collector from 6.0.2 to 6.0.4
Bumps MailKit from 4.17.0 to 4.18.2
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.33
Bumps Microsoft.AspNetCore.OpenApi from 8.0.25 to 8.0.33
Bumps Microsoft.Data.Sqlite from 8.0.30 to 8.0.33
Bumps Microsoft.EntityFrameworkCore.Design from 8.0.30 to 8.0.33
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.30 to 8.0.33
Bumps Microsoft.NET.Test.Sdk from 17.11.1 to 17.14.1
Bumps Microsoft.Playwright from 1.54.0 to 1.64.1
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.10 to 8.0.11
Bumps PDFsharp from 6.2.4 to 6.5.0
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps System.Text.Json from 10.0.11 to 10.0.14
Bumps xunit from 2.9.2 to 2.9.3

---
updated-dependencies:
- dependency-name: MailKit
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 8.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: PDFsharp
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 8.0.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: Microsoft.Playwright
  dependency-version: 1.64.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: AngleSharp
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: bunit
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: coverlet.collector
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-updates
- dependency-name: System.Text.Json
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 28, 2026
@socket-security

socket-security Bot commented Oct 28, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedsystem.text.json@​10.0.11 ⏵ 10.0.14401009010090
Updatedpdfsharp@​6.2.4 ⏵ 6.5.051 -51009010070 -30
Updatedcoverlet.collector@​6.0.2 ⏵ 6.0.464 +1100100100100
Updatedmicrosoft.playwright@​1.54.0 ⏵ 1.64.176 +310010010070 -30
Updatedmicrosoft.aspnetcore.mvc.testing@​8.0.10 ⏵ 8.0.339810090100100
Updatedmicrosoft.net.test.sdk@​17.11.1 ⏵ 17.14.110010090100100
Updatedxunit@​2.9.2 ⏵ 2.9.310010090100100
Updatedmicrosoft.aspnetcore.openapi@​8.0.25 ⏵ 8.0.3310010090100100
Updatedswashbuckle.aspnetcore@​6.6.2 ⏵ 6.9.010010090100100
Updatedmicrosoft.entityframeworkcore.sqlite@​8.0.30 ⏵ 8.0.3310010090100100
Updatedmailkit@​4.17.0 ⏵ 4.18.29310090100100
Updatednpgsql.entityframeworkcore.postgresql@​8.0.10 ⏵ 8.0.1199 -110090100100
Updatedmicrosoft.entityframeworkcore.design@​8.0.30 ⏵ 8.0.339910090100100
Updatedmicrosoft.data.sqlite@​8.0.30 ⏵ 8.0.3310010090100100
Updatedanglesharp@​1.5.0 ⏵ 1.8.69410090100100
Updatedbunit@​1.31.3 ⏵ 1.40.010010090100100

View full report

@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #65.

@dependabot dependabot Bot closed this Oct 28, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/BrassLedger.Api.Tests/routine-updates-779eea1ded branch October 28, 2026 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants