Bump the minor-and-patch group with 3 updates by dependabot[bot] · Pull Request #18 · ragePolpette/Jobbby

Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61623)
The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

Update dependencies from dotnet/arcade (#61832)
This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.
Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#61761)
The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

Update branding to 8.0.17 (#61830)
The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.
Merging internal commits for release/8.0 (#61924)
This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Update branding to 8.0.16 by @vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
[release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
[release/8.0] Upgrade to Ubuntu 22 by @wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
[release/8.0] Fix preserving messages for stateful reconnect with backplane by @BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
fetch TLS client hello message from HTTP.SYS by @BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60355
Update branding to 8.0.15 by @vseanreesermsft in Update branding to 8.0.15 dotnet/aspnetcore#60784
Add partitioned to cookie for SignalR browser testing by @BrennanConroy in Add partitioned to cookie for SignalR browser testing dotnet/aspnetcore#60728
[release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 dotnet/aspnetcore#60677
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Update branding to 8.0.14 by @vseanreesermsft in Update branding to 8.0.14 dotnet/aspnetcore#60197
[release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 dotnet/aspnetcore#60150
[release/8.0] Fix java discovery in IdentityModel pipeline by @wtgodbe in [release/8.0] Fix java discovery in IdentityModel pipeline dotnet/aspnetcore#60075
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#60199
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59922
[release/8.0] Readd DiagnosticSource to KestrelServerImpl by @github-actions in [release/8.0] Readd DiagnosticSource to KestrelServerImpl dotnet/aspnetcore#60203
[release/8.0] Update to MacOS 15 in Helix by @github-actions in [release/8.0] Update to MacOS 15 in Helix dotnet/aspnetcore#60239
[release/8.0] Use the latest available JDK by @wtgodbe in [release/8.0] Use the latest available JDK dotnet/aspnetcore#60233
[release/8.0] Fix skip condition for java tests by @github-actions in [release/8.0] Fix skip condition for java tests dotnet/aspnetcore#60243
[release/8.0] Update list of helix queues to skip by @wtgodbe in [release/8.0] Update list of helix queues to skip dotnet/aspnetcore#60231
[release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification by @github-actions in [release/8.0] [Blazor] Allow cascading value subscribers to get added and removed during change notification dotnet/aspnetcore#57288
[release/8.0] Update remnants of azureedge.net by @sebastienros in [release/8.0] Update remnants of azureedge.net dotnet/aspnetcore#60264
[release/8.0] Centralize on one docker container by @wtgodbe in [release/8.0] Centralize on one docker container dotnet/aspnetcore#60299
Revert "[release/8.0] Update remnants of azureedge.net" by @wtgodbe in Revert "[release/8.0] Update remnants of azureedge.net" dotnet/aspnetcore#60324
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60316

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

[release/8.0] Update dotnetbuilds CDN to new endpoint by @mmitche in [release/8.0] Update dotnetbuilds CDN to new endpoint dotnet/aspnetcore#59575
Update branding to 8.0.13 by @vseanreesermsft in Update branding to 8.0.13 dotnet/aspnetcore#59756
[release/8.0] Skip MVC template tests on HelixQueueArmDebian12 by @wtgodbe in [release/8.0] Skip MVC template tests on HelixQueueArmDebian12 dotnet/aspnetcore#59295
[release/8.0] Update OSX helix queue by @github-actions in [release/8.0] Update OSX helix queue dotnet/aspnetcore#59742
[release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 dotnet/aspnetcore#59678
[release/8.0] Skip tests on internal queues too by @github-actions in [release/8.0] Skip tests on internal queues too dotnet/aspnetcore#59579
[release/8.0] Fix Kestrel host header mismatch handling when port in Url by @BrennanConroy in [release/8.0] Fix Kestrel host header mismatch handling when port in Url dotnet/aspnetcore#59403
Migrate off of Debian 11 by @v-firzha in Migrate off of Debian 11 dotnet/aspnetcore#59584
[release/8.0] Pin to S.T.J 8.0.5 in Analyzers by @wtgodbe in [release/8.0] Pin to S.T.J 8.0.5 in Analyzers dotnet/aspnetcore#59777
[release/8.0] [Blazor WASM standalone] Avoid caching index.html during development by @github-actions in [release/8.0] [Blazor WASM standalone] Avoid caching index.html during development dotnet/aspnetcore#59349
Update to Fedora 41 by @BrennanConroy in Update to Fedora 41 dotnet/aspnetcore#59817
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#59811
[release/8.0] Update dependencies from dotnet/source-build-reference-packages by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#59825
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59864
[release/8.0] Fix/update docker tags by @wtgodbe in [release/8.0] Fix/update docker tags dotnet/aspnetcore#59867
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#59872

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Update branding to 8.0.12 by @vseanreesermsft in Update branding to 8.0.12 dotnet/aspnetcore#58800
[release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 6dae7eb to 1204d63 dotnet/aspnetcore#58741
Add scope for internal npm packages by @BrennanConroy in Add scope for internal npm packages dotnet/aspnetcore#58512
[release/8.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#58477
[release/8.0] Upgrade serialize-javascript transient dependency by @MackinnonBuck in [release/8.0] Upgrade serialize-javascript transient dependency dotnet/aspnetcore#58466
[release/8.0] Update Messagepack dependency by @wtgodbe in [release/8.0] Update Messagepack dependency dotnet/aspnetcore#58676
Merging internal commits for release/8.0 by @vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#58898
[release/8.0] Use MacOS-13 in CI by @wtgodbe in [release/8.0] Use MacOS-13 in CI dotnet/aspnetcore#58549
[release/8.0] Update dependencies from dotnet/arcade by @dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#59065
[release/8.0] Fix java discovery in helix-matrix by @wtgodbe in [release/8.0] Fix java discovery in helix-matrix dotnet/aspnetcore#59181
[release/8.0] Update dependencies from dotnet/roslyn by @wtgodbe in [release/8.0] Update dependencies from dotnet/roslyn dotnet/aspnetcore#59184
[release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 by @dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 1204d63 to d144031 dotnet/aspnetcore#59033

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 8.0.0 to 8.0.1.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

8.0.1

Release

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.14.1 What's Changed

Error on unsupported target frameworks to prevent silently not running tests by @nohwnd in Warning on unsupported tfms microsoft/vstest#15072 and Make the warning error, and restore previous props so we attempt to run microsoft/vstest#15078
Revert writing additional properties to TRX by @nohwnd in microsoft/vstest@47eb51b

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0 What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

Changes

Adding Process Query Flag For UWP .NET 9 Support by @adstep in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
Fix builds on WinUI and UWP .NET 9 projects by @Sergio0694 in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004
don't report communication error on discovery abort by @nohwnd in don't report communication error on discovery abort microsoft/vstest#14992
Add dump minitool to vsix by @nohwnd in Add dump minitool to vsix microsoft/vstest#14707
Make test runners long-path aware (#5179) by @peetw in Make test runners long-path aware (#5179) microsoft/vstest#15014
Fix trace in DataCollectionRequestSender.cs by @stan-sz in Fix trace in DataCollectionRequestSender.cs microsoft/vstest#15025
Fix/readme grammar parallelism by @dellch in Fix/readme grammar parallelism microsoft/vstest#15030
Add binding redirects by @nohwnd in Add binding redirects microsoft/vstest#15041
Write props of tests into trx by @nohwnd in Write props of tests into trx microsoft/vstest#14905

Internal version updates and fixes

Update io.redist by @nohwnd in Update io.redist microsoft/vstest#13872
Use preview image for public build by @nohwnd in Use preview image for public build microsoft/vstest#13888
Remove xcopy-msbuild by @nohwnd in Remove xcopy-msbuild microsoft/vstest#14138
Move to macos14 by @nohwnd in Move to macos14 microsoft/vstest#14137
Update diagnose.md by @nohwnd in Update diagnose.md microsoft/vstest#14776
hash with sha2 for mutex lock by @nohwnd in hash with sha2 for mutex lock microsoft/vstest#14777
Update test projects for vmr by @nohwnd in Update test projects for vmr microsoft/vstest#14894
17.14 branding by @nohwnd in 17.14 branding microsoft/vstest#14903
Update filter.md for NUnit by @OsirisTerje in Update filter.md for NUnit microsoft/vstest#14987
Flag netstandard1.x dependencies in source-build by @ViktorHofer in Flag netstandard1.x dependencies in source-build microsoft/vstest#14986
Use VS dependencies versions from release VS to have archived symbols by @nohwnd in Use VS dependencies versions from release VS to have archived symbols microsoft/vstest#14991
Remove extra ; by @nohwnd in Remove extra ; microsoft/vstest#14995
Use dependencymodel 6.0.2 by @nohwnd in Use dependencymodel 6.0.2 microsoft/vstest#14996
Make Testhost packable only on Windows by @mmitche in Make Testhost packable only on Windows microsoft/vstest#15001
Add system text json to vsix by @nohwnd in Add system text json to vsix microsoft/vstest#15034
Add more files to vsix by @nohwnd in Add more files to vsix microsoft/vstest#15038
Remove unnecessary CA2022 suppressions by @Winniexu01 in Remove unnecessary CA2022 suppressions microsoft/vstest#15035
Update package project url by @mmitche in Update package project url microsoft/vstest#15040

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
... (truncated)

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

Updating to the latest VS, and running tests from net6.0 test projects.
Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Drop unsupported frameworks by @nohwnd in Drop unsupported frameworks microsoft/vstest#10565

New Contributors

@OsirisTerje made their first contribution in Update filter.md for NUnit microsoft/vstest#14987
@adstep made their first contribution in Adding Process Query Flag For UWP .NET 9 Support microsoft/vstest#15003
@Sergio0694 made their first contribution in Fix builds on WinUI and UWP .NET 9 projects microsoft/vstest#15004

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

17.13.0 What's Changed

Add letter number among valid identifiers in class name by @nohwnd in Add letter number among valid identifiers in class name microsoft/vstest#13868
Fix formatting in Runner by @mthalman in Fix formatting in Runner microsoft/vstest#13871
Downgrade xunit skip warning to info by @nohwnd in Downgrade xunit skip warning to info microsoft/vstest#10381
Add msdia for arm64 into nuget by @nohwnd in Add msdia for arm64 into nuget microsoft/vstest#10382
Enable native debugging for vstest.console by @ocitrev in Enable native debugging for vstest.console microsoft/vstest#10401
Fix RFCs links by @Youssef1313 in Fix RFCs links microsoft/vstest#10424
Convert to auto property by @nohwnd in Convert to auto property microsoft/vstest#10365
Update Versions.props by @nohwnd in Update Versions.props microsoft/vstest#10378
Enable TSA by @jakubch1 in Enable TSA microsoft/vstest#10385
Arm64 dia by @nohwnd in Arm64 dia microsoft/vstest#10390
Update source-build team references by @MichaelSimons in Update source-build team references microsoft/vstest#10388
Exclude .signature.p7s from nupkg file count by @ellahathaway in Exclude .signature.p7s from nupkg file count microsoft/vstest#10418
Set NetCurrent so that it doesn't roll forward automatically by @ViktorHofer in Set NetCurrent so that it doesn't roll forward automatically microsoft/vstest#10622

New Contributors

@ocitrev made their first contribution in Enable native debugging for vstest.console microsoft/vstest#10401
@Youssef1313 made their first contribution in Fix RFCs links microsoft/vstest#10424

Full Changelog: microsoft/vstest@v17.12.0...v17.13.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.32 Bumps Microsoft.Extensions.Configuration.UserSecrets from 8.0.0 to 8.0.1 Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 8.0.32 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.UserSecrets dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 17.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-14T23:14:55Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: e52c32cf-30d5-49f3-b4b4-06d905ecd027

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-15T12:59:27Z

The group that created this PR has been removed from your configuration.

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 14, 2026

dependabot Bot closed this Oct 15, 2026

dependabot Bot deleted the dependabot/nuget/src/Host/minor-and-patch-75ca84674b branch October 15, 2026 12:59

Navigation Menu

Repository navigation

Bump the minor-and-patch group with 3 updates - #18

Bump the minor-and-patch group with 3 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/Host/minor-and-patch-75ca84674b

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

coderabbitai Bot commented Oct 14, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

8.0.32

What's Changed

8.0.31

What's Changed

8.0.30

What's Changed

New Contributors

8.0.29

What's Changed

8.0.28

What's Changed

8.0.27

What's Changed

8.0.26

What's Changed

8.0.25

What's Changed

8.0.24

8.0.23

What's Changed

8.0.22

What's Changed

8.0.21

What's Changed

8.0.20

What's Changed

8.0.18

What's Changed

8.0.17

Bug Fixes

Dependency Updates

Miscellaneous

8.0.16

What's Changed

8.0.15

What's Changed

8.0.14

What's Changed

8.0.13

What's Changed

8.0.12

What's Changed

8.0.1

17.14.1

What's Changed

17.14.0

What's Changed

.NET versions updated

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

17.13.0

What's Changed

New Contributors

Uh oh!

coderabbitai Bot commented Oct 14, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants