Bump the nuget group with 22 updates

[dependabot]

Updated Aspire.Hosting.PostgreSQL from 13.6.0 to 13.6.1.

Release notes

Sourced from Aspire.Hosting.PostgreSQL's releases.

13.6.1

What's New in Aspire 13.6.1

Patch release for Aspire 13.6 that reduces dashboard CPU usage during sustained metric ingestion, restores scrolling in the Metrics tree, improves dashboard navigation, fixes container exec watch failures, and ensures session-scoped containers are cleaned up when stopping .NET AppHosts on Windows.

🐛 Fixes

• 📊 Dashboard CPU usage could increase during long-running metric ingestion — Metric retention repeatedly scanned retained history on every insertion, causing steadily increasing CPU usage even with a fixed workload. Cleanup now skips dimensions below capacity and removes only the oldest surplus points when needed. Existing retention limits and exemplar behavior are unchanged, and no configuration changes are required. Regression introduced in 13.6. Fixes #​20725. (#​20747, backport of #​20736, @​JamesNK)

• 📈 The Metrics tree could not be scrolled — The meter and instrument tree now scrolls when it exceeds the viewport, allowing you to reach and select instruments below the fold. Regression introduced in 13.6. Fixes #​20728. (#​20762, backport of #​20758, @​heyysiri)

• 🧭 Dashboard navigation could fail after a browser disconnect — Pending page-state updates now persist session state before navigating and skip navigation when the browser has disconnected, avoiding an unhandled navigation failure. The navigation rail's overflow button also has consistent sizing, icon alignment, and hover styling in expanded and collapsed layouts and both light and dark themes. (#​20545, backport of #​20527, @​JamesNK)

• 🖥️ Container exec watches could terminate shortly after AppHost startup — A stalled DCP watch connection could produce a critical Watch task over Kubernetes ContainerExec resources terminated unexpectedly error and stop subsequent terminal state and log updates from being observed. Watch connection attempts now retry after timeouts, and periodic restarts correctly recreate connections without swallowing unrelated cancellation. Regression introduced in 13.6.0. (#​20664, backport of #​20466, @​radical)

• 🪟 Session-scoped containers could remain running after stopping a .NET AppHost on Windows — AppHosts launched through dotnet run or dotnet watch now allow DCP to finish resource cleanup during shutdown, including existing Ctrl+C and aspire stop flows. Persistent resources remain unaffected, while direct .NET launches and TypeScript/polyglot AppHosts retain their existing process protection. Fixes #​20495. (#​20514, backport of #​20494, @​danegsta)

---

Full Changelog: v13.6.0...v13.6.1

Full commit: 3751e615ad660621f2a7aa4c390ef48e08a0eed8

Commits viewable in compare view.

Updated Marten from 9.46.0 to 9.50.2.

Release notes

Sourced from Marten's releases.

9.50.2

A maintenance release. Nothing in a shipped Marten package changed, and nothing here requires a configuration or code change.

Dependencies

• The NuGet vulnerability audit is clean (#​5666). Marten's shipped packages were never affected by GHSA-846f-f764-76mx (CVE-2026-84008, System.Security.Cryptography.Pkcs). Npgsql doesn't bring that package in. Every finding was in the Nuke build tool or the samples:
  • The build tool now uses patched System.Security.Cryptography.Pkcs, System.Security.Cryptography.Xml and NuGet.Packaging.
  • The OpenTelemetry packages used by the EventPublisher sample and the Aspire sample moved from 1.8.x to 1.19.x.

The same advisory does reach Polecat and Weasel's SQL Server and Oracle packages, through their database drivers. Those are fixed in Polecat 5.40.2 and Weasel 9.45.1.

9.50.1

A patch release with one addition, for Wolverine's agent assignment. Nothing here requires a configuration or code change.

Event store

• IEventStore.TryDescribeDatabasesAsync() is answered straight from the tenancy (#​5664). JasperFx 2.87.1 adds this narrower call, the database half of TryCreateUsage(). It returns each database's server, name and tenant ids without reading the highest event sequence or describing every projection, subscription, event type and tag type. Wolverine 6.50.0 asks for it on every leader heartbeat, for every store, where it used to build the full usage (JasperFx/wolverine#​5002). It follows on from #​5652, so thanks again to @​uniquelau for a report that came with the heartbeat maths already done.

Dependencies

• JasperFx 2.87.1.

9.50.0

A bug-fix release. Nothing here requires a configuration or code change, but three things change what an application observes — read the box below before upgrading.

Observable changes

• TotalResults changes value for Stats() + Include() + Select() + Take(). It was reporting the size of the page; it now reports the number of matches (#​5654). If you compute page counts from it, those counts change — to the correct ones.
• A new warning may appear at startup if tag-type auto-discovery cannot register a projection's identity type. That condition is not new; it was previously silent (#​5649).
• db-patch drop files no longer DROP ... CASCADE every schema — they roll back only what the patch touched (Weasel 9.45.0, weasel#​706). This is the one to look at if you apply drop files in an environment you care about.

LINQ — Include() joined on the queried document's own id

Three separate defects in the same corner, found by pulling on the first one. An Include() joined on the queried document's own id builds a temp table, and that temp table was missing the id it is joined on.

• #​5650 — failed with 42703: column d.id does not exist in a query session when the queried document had any duplicated field. Lightweight, identity-map and dirty-tracked sessions were unaffected. Thanks to @​Blackclaws for the report and the fix (#​5651).
• #​5653 — the same 42703, in a query session, when the query also called Stats(). Unlike #​5650 this did not depend on a duplicated field; Stats() wraps the select clause, which hid it from the check that puts the id back.
• #​5654 — Stats() with an Include() and a Select() projection reported TotalResults as the size of the page rather than the number of matches, whenever Take() was used. No exception, just a wrong number, on every session kind. The temp table already held the correct count — PostgreSQL evaluates a window function before LIMIT — but re-applying the projection emitted a second count(*) over() against the already-truncated temp table.

If you page a projected grid with Stats() and Include(), #​5654 is the one to read.

Event store

• #​5652 — a store with no event types and no projections never has its event tables migrated, so building a usage descriptor asked Postgres for a table that was not there. Marten swallowed the failure, but Postgres logged an ERROR for every attempt; under UseWolverineManagedEventSubscriptionDistribution the leader does this for every store on a ten-second heartbeat, which is tens of thousands of server-side ERROR lines a day for a store that can never hold an event. Marten now asks the catalog first, so nothing reaches the server log. Thanks to @​uniquelau for a report that came with the heartbeat maths already done.
• #​5658 — IEventStore.FindDatabaseForTenantAsync, so a caller waiting on or querying a single tenant touches only that tenant's database instead of all of them. Goes through ITenancy.TryFindDatabase, never FindOrCreateDatabase, so a lookup cannot bring an unknown tenant into existence.

Native AOT

• #​5649 (partial) — a DCB [BoundaryAggregate] fetch failed natively with MissingMethodException, because EventGraph.Build<TDoc>() closed SingleStreamProjection<,> at runtime even though both type arguments were known at compile time. And tag-type auto-discovery swallowed the AOT failure in the same breath as a benign one, leaving a store running with the tag type quietly absent; it now says so. Verified by publishing and running the native binary, not by a clean publish.

  Still open: RegisterTagType<TTag>() closes its own open generic and remains broken under Native AOT. That needs a reflection-free construction path in JasperFx.Events plus a new overload — see the discussion on #​5649. Thanks to @​skoging for an unusually thorough report, with native runs and three costed alternatives.

Dependencies

• Weasel 9.45.0 — db-patch drop files no longer drop every schema with CASCADE; they roll back only what the patch touched (weasel#​706). This changes what an existing drop file does. Primary keys can also now be added to and removed from existing tables (weasel#​707).
• JasperFx 2.87.0 — across all five packages.

Known issue

Stats() with Include() and a Select() projection is fixed here, but note that the Include() itself still follows the page, not the match set — it reads from the same truncated temp table. Only the statistics column outlives the Take(). That is existing, intended behaviour; it is called out because #​5654 makes the distinction visible for the first time.

9.49.0

The LINQ projection surface works under Native AOT

The theme of this release. #​5624 came in as "a projection into an anonymous type cannot be
materialized under Native AOT". Publishing Marten.AotRuntimeSmoke natively and running it showed
something much wider: every Select() projection into a new object failed from a native binary,
a named DTO exactly as hard as an anonymous one, and it failed before the serializer was ever
reached.

MissingMethodException: No parameterless constructor defined for type
'Marten.Linq.SqlGeneration.SelectDataSelectClause`1[YourDto]'

A projection is parsed out of an expression tree, so the parser only has selectExpression.Type and
closed its select clause over that Type with MakeGenericType + Activator.CreateInstance — the
defect class of #​5328, one step later in the pipeline. Only a bare string scalar survived, because
its clause happens not to be generic, which is what made the surface look healthy.

Shapes that threw from a native binary before this release and run now:

• Select(x => new Summary { ... }) — a named DTO
• Select(x => x.Lines) — a collection member, and the element type of a SelectMany(x => x.Lines)
• Select(x => x.Amount) for every framework scalar type, decimal? and the other nullable ones included
• Select(x => x.Status) and MaxAsync(x => x.Status) for an enum of your own — see the one line below
• GroupBy(...).Select(g => new Tally { ... })

The fix is SelectClauseResolvers, which does for projected types what #​5328's
DocumentStorageResolvers does for document types: a registry populated from
MartenLinqQueryable<T>'s constructor, which every projected type reaches because
Queryable.Select<TSource, TResult>() asks the provider for CreateQuery<TResult>(). The reflective
path remains the fallback wherever a JIT is available, so nothing changes for JIT-mode apps.

One line for an enum or struct of your own

Marten's scalar select clause is declared where T : struct and the registration point above
constrains its own T to notnull, so Marten can root the scalar types it renders itself —
decimal, Guid, DateOnly and the rest need nothing — but not one out of your assembly:

opts.Schema.For<Order>();
opts.RegisterScalarType<OrderStatus>();   // new in 9.49.0; no-op under a JIT

Only bare scalar projections need it. Projecting the same enum as a member of a named type, and
filtering on it, never did. When the registration is missing, the failure now names that exact call
instead of reporting a missing parameterless constructor on an internal generic.

An anonymous projection is refused with the remedy

With a source-generated JsonSerializerContext assigned to
... (truncated)

9.48.0

Document diagnostics: filter and order by document properties (jasperfx#​869, #​5631)

IDocumentStoreDiagnostics.QueryDocumentsAsync now applies DocumentQueryOptions.Where / OrderBy / Arguments instead of refusing them. The text goes onto Query<T>() through JasperFx 2.84.0's Dynamic LINQ helper, so member casing, enum storage, duplicated fields, conjoined tenancy, soft deletes and hierarchies are Marten's own; only the SELECT list is swapped for the diagnostics read's columns, so the JSON comes back byte-exact with its metadata, and the total counts the filtered rows. Operator text is never spliced into SQL, and the read issues no DDL.

Measured against a LINQ-to-objects oracle over 83 shapes and three storage configurations; every shape is either right or refused:

• Refused: range comparisons on, and ordering by, an enum stored as its name (string serializer storage or a varchar duplicated field), and <> / a negated comparison on a nullable member unless the text says what null should do (JasperFx's SqlNullSemantics). Date-part members and inline in (…) lists are refused honestly by the provider.
• Fixed rather than refused: criteria orderings put nulls first ascending, as .NET does (PostgreSQL defaults to last), and DateTime arguments compare correctly against timestamp without time zone locators.
• String ordering follows the database's collation (note: Alpine images use musl and sort bytewise).
• Under Native AOT, criteria are refused.

Fixes

• Grouped projections translate Count / LongCount predicates through the Where parser, with null semantics and bound parameters (#​5625).
• A quick-mode StartStream that loses a race for the same stream id now throws ExistingStreamIdCollisionException instead of a raw 23505, so QuickWithServerTimestamps behaves like Rich and Quick (#​5628).

Dependencies

JasperFx 2.84.0

9.47.0

The FetchForWriting / FetchLatest consistency release, plus a bounded async-daemon shutdown.

Read the behaviour changes before upgrading. Two of them can change how your projections and
subscriptions behave on every deployment, and two more refuse a batch shape that used to be accepted.

⚠️ Behaviour changes

Subscription and projection drains are now bounded by StopAndDrainTimeout ([#​5610])

Via JasperFx 2.81.0 (jasperfx#​953 and jasperfx#​983). When a shard stops — host shutdown, or reassignment
to another node — the page in flight finishes, pages still queued are skipped and resumed by the next
owner from committed progression, and a page still running at Projections.StopAndDrainTimeout
(default 5 seconds) is cancelled with its transaction rolled back.

This fixes a real failure: a node that loses a shard's lock no longer keeps applying its backlog
alongside the new owner, an overlap that could end in ProgressionProgressOutOfOrderException and a
Stopped shard. Graceful shutdown is also bounded now, rather than waiting out the whole backlog and
potentially overrunning a Kubernetes termination grace period.

If your projection or subscription pages take longer than 5 seconds, raise the timeout:

opts.Projections.StopAndDrainTimeout = 30.Seconds();

Otherwise those pages are cancelled and re-processed on every shutdown and rebalance. Delivery was
always at-least-once, so no guarantee changed, but duplicates become much more likely — and side effects
performed outside the Marten session (HTTP calls, sends that bypass the transactional outbox) are not
rolled back with the page. Note this applies to async projections as well as subscriptions; the upstream
note covers only subscriptions and is out of date.

A batched FetchLatest or expected-version FetchForWriting must be first in its batch ([#​5604])

For an aggregate projected with ProjectionLifecycle.Async only. Both now bracket their reads in
begin transaction isolation level repeatable read read only … end so those reads share one snapshot,
and PostgreSQL accepts that only as a transaction's first statement. So:

• batch.Events.FetchLatest<T>(id) and batch.Events.FetchForWriting<T>(id, version) have to be the
  first operation in their batch, and
• neither can share a batch with a FetchForExclusiveWriting.

Both are refused at the enlisting call, naming the call to move, rather than surfacing later as a bare
25001. Inline and Live aggregates are unaffected, and inside a caller-owned transaction no bracket is
emitted so neither rule applies. If you batch a FetchLatest behind a Load, move it to the front.

New SnapshotRaceException from a batched exclusive fetch ([#​5613])

A batched FetchForExclusiveWriting on an Async aggregate now throws Marten.Exceptions.SnapshotRaceException
in the rare case where the daemon commits a snapshot between that batch's two reads. Retry the batch, or
fetch outside a batch — outside a batch Marten retries for you and you will never see it.
... (truncated)

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Caching.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.10.0 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.10.1

This release fixes two OpenAI integration issues: a TypeLoadException on tool-carrying Responses API calls and a streaming crash against third-party OpenAI-compatible endpoints, by upgrading the OpenAI SDK to 2.14.0.

Packages in this release

Package	Version
Microsoft.Extensions.AI.OpenAI	10.10.1
Microsoft.Extensions.AI.Abstractions	10.10.1

What's Changed

AI

• Upgrade OpenAI SDK to 2.14.0 #​7761 by @​zxyao145

Acknowledgements

• @​zxyao145 made their first contribution in #​7761
• @​zxyao145 submitted issue #​7760 (resolved by #​7761)
• @​jozkee @​wtgodbe reviewed pull requests

Full Changelog: dotnet/extensions@v10.10.0...v10.10.1

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.12.0 to 6.12.1.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.12.1

Fixes 🐛

• fix: builds no longer fail when symbol upload or release creation is enabled but no Sentry auth token is available by @​jamescrosswell in #​5705
• fix: count exception filter and exception processor failures as callback_error, and stop dropping events when an SDK processor fails by @​jamescrosswell in #​5688
• fix: SentryCreateRelease uses the assembly's informational version and no longer requires UseSentryCLI by @​jamescrosswell in #​5679
• fix: accept breadcrumbs as {"values": [...]} when deserializing events and transactions by @​jamescrosswell in #​5673
• fix: capturing with a configureScope callback no longer re-runs BeforeBreadcrumb or re-syncs the scope to native SDKs by @​jamescrosswell in #​5653
• fix: accept Unix epoch timestamps when deserializing breadcrumbs, transactions, spans and client reports by @​jamescrosswell in #​5672

Dependencies ⬆️

Deps

• chore(deps): update Java SDK to v8.60.0 by @​github-actions in #​5696
• chore(deps): update Cocoa SDK to v9.30.1 by @​github-actions in #​5697
• chore(deps): update Native SDK to v0.17.2 by @​github-actions in #​5680
• chore(deps): update Java SDK to v8.59.0 by @​github-actions in #​5661

Other

• perf: counting discarded telemetry for client reports no longer allocates by @​jamescrosswell in #​5687
• ci: upgrade ubuntu 20.04/22.04 runners to 24.04 by @​joshuarli in #​5667

Commits viewable in compare view.

Updated Sentry.OpenTelemetry.Exporter from 6.12.0 to 6.12.1.

Release notes

Sourced from Sentry.OpenTelemetry.Exporter's releases.

6.12.1

Fixes 🐛

• fix: builds no longer fail when symbol upload or release creation is enabled but no Sentry auth token is available by @​jamescrosswell in #​5705
• fix: count exception filter and exception processor failures as callback_error, and stop dropping events when an SDK processor fails by @​jamescrosswell in #​5688
• fix: SentryCreateRelease uses the assembly's informational version and no longer requires UseSentryCLI by @​jamescrosswell in #​5679
• fix: accept breadcrumbs as {"values": [...]} when deserializing events and transactions by @​jamescrosswell in #​5673
• fix: capturing with a configureScope callback no longer re-runs BeforeBreadcrumb or re-syncs the scope to native SDKs by @​jamescrosswell in #​5653
• fix: accept Unix epoch timestamps when deserializing breadcrumbs, transactions, spans and client reports by @​jamescrosswell in #​5672

Dependencies ⬆️

Deps

• chore(deps): update Java SDK to v8.60.0 by @​github-actions in #​5696
• chore(deps): update Cocoa SDK to v9.30.1 by @​github-actions in #​5697
• chore(deps): update Native SDK to v0.17.2 by @​github-actions in #​5680
• chore(deps): update Java SDK to v8.59.0 by @​github-actions in #​5661

Other

• perf: counting discarded telemetry for client reports no longer allocates by @​jamescrosswell in #​5687
• ci: upgrade ubuntu 20.04/22.04 runners to 24.04 by @​joshuarli in #​5667

Commits viewable in compare view.

Updated Supabase.Gotrue from 8.3.0 to 8.3.1.

Release notes

Sourced from Supabase.Gotrue's releases.

8.3.1

8.3.1 (2026-10-09)

Bug Fixes

• gotrue: classify auth errors by error_code (#​431) (4d61db6)
• gotrue: reuse the HttpClient when a proxy is set (#​478) (9993ea0)
• gotrue: throw a GotrueException for a non-JSON 2xx body (#​494) (19ad898)
• gotrue: verify ES256 tokens on the server when the platform has no ECDsa (#​482) (9b68791)
• postgrest: reuse the HttpClient when a proxy is set (#​477) (8552e15)
• realtime: fail subscribe when the join times out (#​480) (9b80ab2)
• realtime: stop deserializing postgres_change into the typed payload (#​491) (718313d)
• storage: finish an empty resumable upload at the create (#​500) (b68300d)
• storage: reuse the client's HttpClients in From (#​476) (d122da0)
• storage: throw a SupabaseStorageException for a non-JSON 2xx body (#​495) (9ead331)
• storage: throw when a resumable upload chunk is cancelled or fails (#​475) (b298f95)

Commits viewable in compare view.

Updated Supabase.Storage from 8.3.0 to 8.3.1.

Release notes

Sourced from Supabase.Storage's releases.

8.3.1

8.3.1 (2026-10-09)

Bug Fixes

• gotrue: classify auth errors by error_code (#​431) (4d61db6)
• gotrue: reuse the HttpClient when a proxy is set (#​478) (9993ea0)
• gotrue: throw a GotrueException for a non-JSON 2xx body (#​494) (19ad898)
• gotrue: verify ES256 tokens on the server when the platform has no ECDsa (#​482) (9b68791)
• postgrest: reuse the HttpClient when a proxy is set (#​477) (8552e15)
• realtime: fail subscribe when the join times out (#​480) (9b80ab2)
• realtime: stop deserializing postgres_change into the typed payload (#​491) (718313d)
• storage: finish an empty resumable upload at the create (#​500) (b68300d)
• storage: reuse the client's HttpClients in From (#​476) (d122da0)
• storage: throw a SupabaseStorageException for a non-JSON 2xx body (#​495) (9ead331)
• storage: throw when a resumable upload chunk is cancelled or fails (#​475) (b298f95)

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.2.3 to 10.3.0.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.3.0

What's Changed

• Change nullability handling for schemas with anyOf, allOf, oneOf or type = null by @​ldeluigi in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
• Handle leading slash on route prefix during index.html GET by @​superstator in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
• Move NRT handling to DataContractResolver by @​desjoerd in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
• Clarify nullable behaviour by @​martincostello in Clarify nullable behaviour domaindrivendev/Swashbuckle.AspNetCore#4094
• Fix review issues for caching and encoding by @​martincostello in Fix review issues for caching and encoding domaindrivendev/Swashbuckle.AspNetCore#4093
• Support multiple response types per status code by @​DeagleGross in Support multiple response types per status code domaindrivendev/Swashbuckle.AspNetCore#4100
• Add coverage for AddServer across multiple documents by @​RaphaelFakhri in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
• Fix Swagger sort key fallback for empty endpoint tags metadata by @​AleksaMCode in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
• Fix parameter matching to consider location when names collide by @​nonsoikem in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
• Emit form encoding for properties of a complex form parameter by @​RaphaelFakhri in Fix #3169: emit form encoding for properties of a complex form parameter domaindrivendev/Swashbuckle.AspNetCore#4128
• Keep a property's own summary when comments come from several XML files by @​RaphaelFakhri in Fix #3240: keep a property's own summary when comments come from several XML files domaindrivendev/Swashbuckle.AspNetCore#4129
• Strip query string from relative document URLs in Swagger UI by @​GabeSilvaDev in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
• Document that System.Text.Json ignores [EnumMember] by @​RaphaelFakhri in Document that System.Text.Json ignores [EnumMember] domaindrivendev/Swashbuckle.AspNetCore#4127
• Drop the regex route constraint from the default Swagger route by @​RaphaelFakhri in Fix #2951: drop the regex route constraint from the default Swagger route domaindrivendev/Swashbuckle.AspNetCore#4130
• Serialize custom values in the UI ConfigObject.AdditionalItems by @​RaphaelFakhri in Fix #3153: serialize custom values in the UI ConfigObject AdditionalItems domaindrivendev/Swashbuckle.AspNetCore#4132
• Use Minimal APIs JSON options when MVC is not registered by @​RaphaelFakhri in Use Minimal APIs JSON options when MVC is not registered domaindrivendev/Swashbuckle.AspNetCore#4116
• Resolve enum contracts against the underlying type under source generation by @​RaphaelFakhri in Fix #3217: resolve enum contracts against the underlying type under source generation domaindrivendev/Swashbuckle.AspNetCore#4131

New Contributors

• @​ldeluigi made their first contribution in Change nullability handling for schemas with anyOf, allOf, oneOf or type = null domaindrivendev/Swashbuckle.AspNetCore#3976
• @​superstator made their first contribution in Handle leading slash on route prefix during index.html GET domaindrivendev/Swashbuckle.AspNetCore#4084
• @​desjoerd made their first contribution in Move NRT handling to DataContractResolver domaindrivendev/Swashbuckle.AspNetCore#3998
• @​RaphaelFakhri made their first contribution in Add coverage for AddServer across multiple documents domaindrivendev/Swashbuckle.AspNetCore#4115
• @​AleksaMCode made their first contribution in Fix Swagger sort key fallback for empty endpoint tags metadata domaindrivendev/Swashbuckle.AspNetCore#4125
• @​nonsoikem made their first contribution in Fix parameter matching to consider location when names collide domaindrivendev/Swashbuckle.AspNetCore#4126
• @​GabeSilvaDev made their first contribution in Strip query string from relative document URLs in Swagger UI domaindrivendev/Swashbuckle.AspNetCore#4152
• @​JulianThoms made their first contribution in Add regression tests for nullable dynamic properties domaindrivendev/Swashbuckle.AspNetCore#4182

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.3...v10.3.0

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

• feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
• feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
• feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

• fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
• fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
• fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
• fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
• fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

• docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
• docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

• fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
• chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
• chore: Remove Minio module (#​1769) @​HofmeisterAn
• chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
• feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 5 updates (#​1781) @​dependabot[bot]

Commits viewable in compare view.

Updated xunit.v3 from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions