chore(deps): update all non-major dependencies - #771
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 17, 2026 05:16
0dab7d3 to
643f7f0
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
14 times, most recently
from
July 19, 2026 17:07
e94f007 to
f25ad76
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 21, 2026 02:55
f25ad76 to
6836acb
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
Note
Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.
Updates dependency versions across solution, tests, and samples to align with newer releases.
Changes:
- Bump
AwesomeAssertionsfrom9.4.0to9.5.0across projects. - Bump
Microsoft.Identity.Webfrom4.13.1to4.13.2(and relatedMicrosoft.Identity.*/Microsoft.IdentityModel.*lockfile entries). - Bump
Scalar.AspNetCorefrom2.16.13to2.16.16in the MediatorFramework sample.
Reviewed changes
Copilot reviewed 22 out of 22 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| tests/WebApplicationDemo.Tests/packages.lock.json | Updates locked test dependencies (AwesomeAssertions, Identity.Web related transitive packages). |
| tests/Ark.Tools.Sql.Oracle.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.ResourceWatcher.Tests/packages.lock.json | Updates locked test dependencies for AwesomeAssertions across TFMs. |
| tests/Ark.Tools.Nodatime.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.Nodatime.Protobuf.Tests/packages.lock.json | Updates locked test dependencies for AwesomeAssertions across TFMs. |
| tests/Ark.Tools.MediatorFramework.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.FtpClient.FluentFtp.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.Core.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.Core.Reflection.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| tests/Ark.Tools.AspNetCore.ProblemDetails.Tests/packages.lock.json | Updates locked test dependency for AwesomeAssertions. |
| src/common/Ark.Tools.Reqnroll/packages.lock.json | Updates locked dependencies for AwesomeAssertions across TFMs. |
| samples/WebApplicationDemo/packages.lock.json | Updates locked sample dependencies for Microsoft.Identity.Web and transitive identity packages. |
| samples/TestLinkGenerator/packages.lock.json | Updates locked sample dependencies for Microsoft.Identity.Web and transitive identity packages. |
| samples/Ark.ResourceWatcher/Directory.Packages.props | Updates centrally-managed sample testing dependency version for AwesomeAssertions. |
| samples/Ark.ResourceWatcher/Ark.ResourceWatcher.Sample.Tests/packages.lock.json | Updates locked sample test dependencies for AwesomeAssertions. |
| samples/Ark.ReferenceProject/Directory.Packages.props | Updates centrally-managed sample dependency versions for Microsoft.Identity.Web and AwesomeAssertions. |
| samples/Ark.ReferenceProject/Core/Ark.Reference.Core.WebInterface/packages.lock.json | Updates locked sample dependencies for Microsoft.Identity.Web and transitive identity packages. |
| samples/Ark.ReferenceProject/Core/Ark.Reference.Core.Tests/packages.lock.json | Updates locked sample test dependencies (AwesomeAssertions, Identity.Web related transitive packages). |
| samples/Ark.MediatorFramework.Sample/test/Ark.MediatorFramework.Sample.Tests/packages.lock.json | Updates locked sample test dependencies (AwesomeAssertions, Identity.Web related transitive packages). |
| samples/Ark.MediatorFramework.Sample/src/Ark.MediatorFramework.Sample.WebInterface/packages.lock.json | Updates locked sample web dependencies (Microsoft.Identity.Web + Scalar.AspNetCore). |
| samples/Ark.MediatorFramework.Sample/Directory.Packages.props | Updates centrally-managed sample dependency versions for Scalar.AspNetCore, Microsoft.Identity.Web, and AwesomeAssertions. |
| Directory.Packages.props | Updates repo-wide centrally-managed package versions for AwesomeAssertions and Microsoft.Identity.Web. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 21, 2026 19:37
6836acb to
bbce707
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 24, 2026 17:34
bbce707 to
6eafca3
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
July 25, 2026 06:07
6eafca3 to
12d12d0
Compare
AndreaCuneo
previously approved these changes
Jul 25, 2026
Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>
Co-authored-by: AndreaCuneo <5227688+AndreaCuneo@users.noreply.github.com>
The CI build failed after `Auth0.AuthenticationApi` introduced two new
`IAuthenticationApiClient` methods. The caching decorator no longer
implemented the updated interface.
- **Auth0 compatibility**
- Added passthrough implementations for:
- `TokenExchangeTokenRequest`
- `FederatedConnectionAccessTokenRequest`
- Added XML documentation for both public methods.
```csharp
public async Task<AccessTokenResponse> GetTokenAsync(
TokenExchangeTokenRequest request,
CancellationToken cancellationToken = default)
{
return await _inner.GetTokenAsync(request, cancellationToken)
.ConfigureAwait(false);
}
```
AndreaCuneo
approved these changes
Jul 25, 2026
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Comment on lines
+143
to
+148
| <PackageVersion Include="Auth0.AuthenticationApi" Version="7.48.0" /> | ||
| <PackageVersion Include="Auth0.ManagementApi" Version="9.1.0" /> | ||
| <PackageVersion Include="Microsoft.Identity.Client.Extensions.Msal" Version="4.87.0" /> | ||
| <PackageVersion Include="Microsoft.Identity.Client" Version="4.87.0" /> | ||
| <PackageVersion Include="JWT" Version="11.1.0" /> | ||
| <PackageVersion Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.19.2" /> | ||
| <PackageVersion Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.21.0" /> |
Comment on lines
+186
to
+206
| /// <summary> | ||
| /// Exchanges a token using the OAuth 2.0 Token Exchange grant. | ||
| /// </summary> | ||
| /// <param name="request">The token exchange request.</param> | ||
| /// <param name="cancellationToken">The cancellation token to cancel the operation.</param> | ||
| /// <returns>The requested access token response.</returns> | ||
| public async Task<AccessTokenResponse> GetTokenAsync(TokenExchangeTokenRequest request, CancellationToken cancellationToken = default) | ||
| { | ||
| return await _inner.GetTokenAsync(request, cancellationToken).ConfigureAwait(false); | ||
| } | ||
|
|
||
| /// <summary> | ||
| /// Exchanges an Auth0 token for an access token issued by a federated connection. | ||
| /// </summary> | ||
| /// <param name="request">The federated connection access token request.</param> | ||
| /// <param name="cancellationToken">The cancellation token to cancel the operation.</param> | ||
| /// <returns>The requested access token response.</returns> | ||
| public async Task<AccessTokenResponse> GetTokenAsync(FederatedConnectionAccessTokenRequest request, CancellationToken cancellationToken = default) | ||
| { | ||
| return await _inner.GetTokenAsync(request, cancellationToken).ConfigureAwait(false); | ||
| } |
AndreaCuneo
disabled auto-merge
July 25, 2026 08:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.47.0→7.48.09.0.0→9.1.09.4.0→9.5.02.82.0→2.83.03.0.123→3.0.1254.86.1→4.87.04.86.1→4.87.04.13.1→4.13.28.19.2→8.21.023.26.200→23.26.3007.2.4→7.2.52.16.13→2.16.16Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
auth0/auth0.net (Auth0.AuthenticationApi)
v7.48.0Compare Source
Full Changelog
Added
UserInfo.AdditionalClaimsis now deprecated) #1046 (kailash-b)Security
AwesomeAssertions/AwesomeAssertions (AwesomeAssertions)
v9.5.0Compare Source
What's Changed
New features
Improvements
GivenSelector<T>.FailWith()to matchAssertionChain.FailWith()by @JakenVeina in #522Fixes
Others
Dependencies
New Contributors
Full Changelog: AwesomeAssertions/AwesomeAssertions@9.4.0...9.5.0
meziantou/Meziantou.Analyzer (Meziantou.Analyzer)
v3.0.125Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.125
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.124...3.0.125
v3.0.124Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.124
What's Changed
defaultliterals in named-argument checks by @meziantou with @Copilot in #1222Full Changelog: meziantou/Meziantou.Analyzer@3.0.123...3.0.124
AzureAD/microsoft-authentication-library-for-dotnet (Microsoft.Identity.Client)
v4.87.0Compare Source
======
New Features
MsalServiceException.ErrorCodesForLogging(as a publicIReadOnlyList<string>), surfacing the raw STS-specific error codes (for example the numericAADSTScodes) for diagnostics and logging. #6138WithOtelTagsEnricheron the managed identity request builder, allowing callers to enrich the OpenTelemetry tags emitted for managed identity token requests. #6144AssertionRequestOptions.OtelTagsEnricher, forwarding the OpenTelemetry tags enricher to the client-assertion callback. #6142Bug Fixes
ExecutionResult.Exceptionfor non-MSAL failures and exposed theMsalException.AuthenticationResultMetadataKeyconstant so callbacks can retrieve the associated authentication-result metadata. #6139Changes
WithClaimsFromClient; it now applies to confidential-client scenarios only. #61132019-11-01to2020-06-01. #6130AzureAD/microsoft-identity-web (Microsoft.Identity.Web)
v4.13.2New features
DownstreamApinow honors the newAuthorizationHeaderProviderOptions.OnBeforeAuthHeaderCreationandOnAfterAuthHeaderCreationhooks (Microsoft.Identity.Abstractions12.5.0).OnBeforeAuthHeaderCreationruns before the header is created — use it to shape the request that request-binding protocols (SignedHttpRequestq/h/b) sign — andOnAfterAuthHeaderCreationruns after the header is set, to observe or adjust the finalized request. See #3942.Dependencies updates
Microsoft.Identity.Abstractionsfrom 12.4.0 to 12.5.0 (adds theOnBeforeAuthHeaderCreation/OnAfterAuthHeaderCreationrequest hooks). See #3947.Fundamentals
BaseAuthorizationHeaderProviderandDefaultAuthorizationHeaderProviderdeclareIAuthorizationHeaderProvider2only, since it already extendsIAuthorizationHeaderProvider. See #3942.AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.JsonWebTokens)
v8.20.0Compare Source
Performance Improvements
Bug Fixes
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.2...8.20.0
ravendb/ravendb (RavenDB.Client)
v7.2.5Compare Source
Features
[CDC Sink]Added the CDC Sink task that syncs changes from relational databases into RavenDB documents Docs | Guide[Connection Strings]Added server-wide connection strings Docs | Guide[Debug]Added the Debug Package Analyzer Docs | Guide[Integrations]Added support for Power BI DirectQuery mode Docs[Queue Sink]Added Azure Service Bus support Docs | Guide[SSO]Added Single Sign-On (SSO) access to RavenDB Studio Docs | GuideServer
[AI]Improved the error message when the configured AI provider does not support a given file format[AI Agents]Added AI agent client code generation[AI Agents]Improved AI agent conversation paging and exposed attachment names on the conversation level[AI Agents]Added cancellation support for AI agent conversation operations[AI Agents]Fixed a shutdown race in AI workers when the database record changed while new work was being queued[AI Agents]Fixed a BadRequest error after sending a trimmed AI agent conversation[Audit Log]Fixed audit logging for pull replication sink updates[Backup]Fixed a backup hang when uploading directly to Amazon S3 or Azure Blob Storage (upload I/O no longer runs on the backup thread's synchronization context)[Backup]Added an option to disable S3 checksum validation, allowed only for custom (S3-compatible) endpoints[Compaction]Fixed an error during compaction of the TimeSeries.Stats table[Corax]Fixed faceted queries returning empty values when the facet field used an alias (the term was resolved from the display name instead of the indexed field name)[Corax]Fixed search() with wildcards on dynamic fields created with CreateField()[Corax]Fixed UTF-8 bounds checking and same-language number comparison in alphanumerical sorting[Core]Fixed inconsistent equality, hashing and string materialization for values containing control characters; databases created with this version also reject control characters in document identifiers. This change does not affect existing databases[Databases]Persisted the database's supported features in the documents storage; creating a database over an existing data directory now restores them from disk instead of assuming the newest defaults[Debug]Fixed missing information from some shards in the debug package of a sharded database[Docker]Added a multiarch Docker image tag with the full server version[GenAI]Fixed GenAI tasks failing with an authentication error on secured servers by authenticating model queries with the server certificate[Indexing]Fixed index terms of non-ASCII values being truncated after a value longer than 2048 characters was indexed into the same field[Linux]Issued a sequential read-ahead hint for journal files on database startup recovery and released already-processed journal pages during recovery (configurable viaStorage.UseSequentialReadAheadHintForJournalRecovery, enabled by default)[Linux]Added a server startup alert when a block device'sread_ahead_kbexceeds the recommended threshold (configurable viaStorage.ReadAheadKbAlertThresholdInKb, default 128 KB)[Logging]Fixed an ObjectDisposedException when audit logging an offline database migration[Monitoring]Added support for customizing the OpenTelemetry service name and namespace (configurable viaMonitoring.OpenTelemetry.ServiceNameandMonitoring.OpenTelemetry.ServiceNamespace)[Monitoring]ETL, AI task and CDC Sink metrics are exposed as gauges[Monitoring]Excluded AI tasks from the ETL metrics group in server monitoring[Notifications]Included ETL, AI and CDC Sink task-error counts in database statistics change notifications so the Studio task errors badge updates live[Performance]Fixed high CPU usage when writing large HTTP responses[Querying]Fixed a NullReferenceException in streaming queries on encrypted databases with Lucene indexes when a concurrent read transaction was disposed mid-read[Queue Sink]Fixed the Queue Sink fallback retry back-off being stuck at 5 seconds instead of escalating[Replication]Fixed active/active replication divergence for counters and time series: conflict-resolved values could be skipped by the replication send gate, and concurrent same-timestamp time series values now converge regardless of replication direction[Replication]Fixed majority write assurance to compute the required sibling count from the database group topology, excluding promotable nodes, instead of the destinations list[Replication]Fixed bidirectional filtered pull replication inflating the hub's database change vector, which could cause internal replication between hub cluster nodes to skip documents[Replication]Fixed SinkToHub pull replication re-sending all documents from scratch after a hub node failover[Replication]Fixed outgoing replication heartbeat starvation on busy nodes and cleaned up half-open incoming replication connections[Replication]Fixed HubToSink pull replication connection handoff and cleanup, including reconnecting after configuration changes and guarding against stale connectors[Replication]Fixed external replication conflicting a document recreated after a cluster-wide delete, resolving to the tombstone instead of the new document[Replication]Fixed external replication of sharded revisions to pre-6.0 servers by stripping the revision change vector to its version part[Revisions]Changed revision storage keys to fixed-size hashes of the change vector, bounding key size regardless of cluster topology history. This release includes an internal storage schema update; after upgrading, downgrading to an earlier version is not possible[RQL]Replaced a NullReferenceException with a readable RQL syntax error when a method call has no name[Sharding]Fixed re-put attachments not surviving a bucket re-send after bucket migration source failover (an attachment put over a tombstone now supersedes the tombstone's change vector)[Sharding]Fixed bucket migration getting stuck when revision or attachment tombstones were present[Sharding]Fixed deleted time series being resurrected when a bucket was re-sent after the migration source node failed over[Smuggler]Fixed smuggler import disposing the caller's stream instead of honoring leaveOpen[Storage]Fixed database compaction corrupting the attachments index on databases migrated from 6.2 or 7.1 to 7.2 (the persisted table schema was stale). The schema is now repaired automatically at database load. If such a database was already compacted on an earlier 7.2 version and shows any signs of corruption, running the compaction again after upgrading might resolve the issue; otherwise restore from a backup[Vector Search]Optimized vector search indexing and query performance[Vector Search]Fixed a use-after-free in parallel HNSW node placement during vector indexing[Voron]Fixed tree rebalancing corrupting the tree when re-adding a large separator key split ancestor pages during a delete, which could unlink subtrees and make keys unreachable; added invariant checks that fail the transaction instead of committing corruption[Voron]Prevented journal recovery from overwriting flushed data when invalid journals are skipped due toIgnoreInvalidJournalErrors[.NET]Updated to .NET 10.0.9Client API
[Session]FixedAdvanced.HasChangesreturning true after loading an entity with a ulong property holding a large valueStudio
[Certificates]Fixed database access checks to compare certificate database permissions case-insensitively[Core]Fixed download links in the import-from-RavenDB view and the new-version-available notification to point to the correct URL[Databases]Fixed footer statistics initialization to prevent null reference errors[Databases]Fixed the databases view to load database details from the first healthy node when the database is not hosted on the current node[Sample Data]Redesigned the Sample Queries view with a searchable scripts and methods referenceArticles
Configuration
📅 Schedule: (in timezone Europe/Rome)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.