chore(deps) Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@semantic-release/release-notes-generator	14.1.0 → 14.1.1
ITfoxtec.Identity.Saml2 (source)	4.17.0 → 4.18.0
ITfoxtec.Identity.Saml2.MvcCore (source)	4.17.0 → 4.18.0
Microsoft.AspNetCore.Authentication.JwtBearer (source)	9.0.14 → 9.0.16
Microsoft.AspNetCore.Authentication.Negotiate (source)	9.0.14 → 9.0.16
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	9.0.14 → 9.0.16
Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation (source)	9.0.14 → 9.0.16
Microsoft.AspNetCore.Mvc.Testing (source)	9.0.14 → 9.0.16
Microsoft.AspNetCore.WebUtilities (source)	9.0.14 → 9.0.16
Microsoft.EntityFrameworkCore (source)	9.0.14 → 9.0.16
Microsoft.EntityFrameworkCore.InMemory (source)	9.0.14 → 9.0.16
Microsoft.EntityFrameworkCore.SqlServer (source)	9.0.14 → 9.0.16
Microsoft.EntityFrameworkCore.Tools (source)	9.0.14 → 9.0.16
Selenium.WebDriver (source)	4.43.0 → 4.44.0
SonarAnalyzer.CSharp (source)	10.23.0.137933 → 10.26.0.140279
System.IdentityModel.Tokens.Jwt	8.17.0 → 8.18.0
System.Text.Json (source)	9.0.14 → 9.0.16

---

Release Notes

semantic-release/release-notes-generator (@​semantic-release/release-notes-generator)

v14.1.1

Compare Source

Bug Fixes

• deps: update dependency get-stream to v9 (#​613) (9728887)

ITfoxtec/ITfoxtec.Identity.Saml2 (ITfoxtec.Identity.Saml2)

v4.18.0: Version 4.18.0

Compare Source

• Replaced deprecated System.ServiceModel.Security references with direct System.ServiceModel.Primitives references across supported target frameworks.
• Configured NuGet Audit to warn about transitive vulnerabilities.
• Updated NuGet packages to fix vulnerabilities.
• Allowed the claimsTransform delegate to be asynchronous via the new CreateSessionAsync() helper.

NuGet package released:
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.Mvc/
https://www.nuget.org/packages/ITfoxtec.Identity.Saml2.MvcCore/

SeleniumHQ/selenium (Selenium.WebDriver)

v4.44.0

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.26.0.140279

Compare Source

Release notes - .NET Analyzers - 10.26

Feature

NET-3694 Update RSPEC before 10.26 release

False Positive

NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt

False Negative

NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized

v10.25.0.139117: 10.25

Compare Source

?

Feature

• NET-3613 - Support Cobertura coverage file format
  • Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
• NET-3665 - Update RSPEC before 10.25 release

False Positive

• NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

v10.24.0.138807: 10.24

Compare Source

This release brings a batch of false negative fixes and analyzer crash fixes.

Bug Fixes

• NET-3596 - Fix S1144 AD0001: Index out of range exception with type named Nullable
• NET-3522 - Fix S1215 AD0001: ArgumentOutOfRangeException
• NET-3521 - Fix S2053 AD0001: NRE
• NET-3520 - Fix S3267 AD0001: NRE

False Positives

• NET-2276 - Fix S1192 FP: EF migration classes

False Negatives

• NET-3569 - Fix T0008 and T0009 FN: Support extension blocks
• NET-2875 - Fix S2092 FN: Null Conditional Assignment
• NET-2857 - Fix S3330 FN: Null Conditional Assignment
• NET-2719 - Fix S4136 FN: Extension methods
• NET-2688 - Fix S4433 FN: Null-conditional assignment in tracker
• NET-2675 - Fix S6418 FN: Field keyword
• NET-2667 - Fix S2934 FN: Null-conditional assignment and field keyword
• NET-2658 - Fix S127 FN: BitShiftCompound

AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (System.IdentityModel.Tokens.Jwt)

v8.18.0

Compare Source

New Features

• Introduced a new interface IConfigurationEventHandlerContextAware<T> that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #​3444.
• Added Microsoft.IdentityModel.Dpop — a new package implementing DPoP (Demonstrating Proof-of-Possession) per RFC 9449. Provides both client-side and server-side proof validation with no System.Net.Http dependency. See PR #​3443.

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • "before 10pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.