Bump the safe-api-dependencies group with 9 updates #424

A new app context switch Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner was introduced to let the client ignore server-provided failover partner info in Basic Availability Groups (BAGs). When the switch is enabled, only the failover partner specified in the connection string is used; server-supplied partner values are skipped. This context switch was introduced in PR #3702.

Who Benefits:

Applications connecting to SQL Server BAGs using TCP and custom ports, especially where the server's provided partner name lacks the protocol, host, or port. This avoids connection failures when the server-provided partner is incompatible or incomplete.
Teams who manage availability groups and rely on client-side control of failover behavior in heterogeneous networking environments.

Impact:

If your environment might be affected (i.e., you operate a BAG with custom ports, or have experienced failures after failover), you can enable the new switch in your application:

AppContext.SetSwitch("Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner", true);

Then, ensure your connection string includes your preferred failover partner (with correct tcp:host,port) so that the client uses that instead of the server's suggestion.
Without enabling this, by default, the client continues to prefer the server-provided partner, maintaining backwards compatibility.

Fixed

Fixed an issue to ensure reliable metrics initialization during startup, preventing missed telemetry when EventSource is enabled early. (#3718)

Target Platform Support

.NET Framework 4.6.2+ (Windows ARM64, Windows x86, Windows x64)
.NET 8.0+ (Windows x86, Windows x64, Windows ARM64, Windows ARM, Linux, macOS)

Dependencies

.NET Framework 4.6.2+

Azure.Core 1.47.1
Azure.Identity 1.14.2
Microsoft.Bcl.Cryptography 8.0.0
Microsoft.Data.SqlClient.SNI 6.0.2
Microsoft.Extensions.Caching.Memory 8.0.1
Microsoft.IdentityModel.JsonWebTokens 7.7.1
Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
System.Buffers 4.5.1
System.Data.Common 4.3.0
System.Security.Cryptography.Pkcs 8.0.1
System.Text.Encodings.Web 8.0.0
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 9.0.10 to 9.0.11.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

9.0.11

Release

What's Changed

Update branding to 9.0.11 by @vseanreesermsft in Update branding to 9.0.11 dotnet/aspnetcore#63950
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63677
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63678
[release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 dotnet/aspnetcore#63894
[release/9.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in [release/9.0] Fixed devtools url used for debug with chrome and edge dotnet/aspnetcore#61948
[release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion dotnet/aspnetcore#63934
[release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @github-actions[bot] in [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation dotnet/aspnetcore#63956
[release/9.0] Fix nginx install on mac, linux by @wtgodbe in [release/9.0] Fix nginx install on mac, linux dotnet/aspnetcore#63966
[Hot Reload] Do not attempt to apply empty deltas. by @tmat in [Hot Reload] Do not attempt to apply empty deltas. dotnet/aspnetcore#63979
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#64036
Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in Revert log level severity for unknown proxy in ForwardedHeadersMiddleware dotnet/aspnetcore#64091
Set timeoutInMinutes to 0 for Windows build job by @vseanreesermsft in Set timeoutInMinutes to 0 for Windows build job dotnet/aspnetcore#64126

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.10 to 9.0.11.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

9.0.11

Release

What's Changed

Update branding to 9.0.11 by @vseanreesermsft in Update branding to 9.0.11 dotnet/aspnetcore#63950
[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63677
[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63678
[release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 by @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 dotnet/aspnetcore#63894
[release/9.0] Fixed devtools url used for debug with chrome and edge by @github-actions[bot] in [release/9.0] Fixed devtools url used for debug with chrome and edge dotnet/aspnetcore#61948
[release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @DeagleGross in [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion dotnet/aspnetcore#63934
[release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @github-actions[bot] in [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation dotnet/aspnetcore#63956
[release/9.0] Fix nginx install on mac, linux by @wtgodbe in [release/9.0] Fix nginx install on mac, linux dotnet/aspnetcore#63966
[Hot Reload] Do not attempt to apply empty deltas. by @tmat in [Hot Reload] Do not attempt to apply empty deltas. dotnet/aspnetcore#63979
Merging internal commits for release/9.0 by @vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#64036
Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @BrennanConroy in Revert log level severity for unknown proxy in ForwardedHeadersMiddleware dotnet/aspnetcore#64091
Set timeoutInMinutes to 0 for Windows build job by @vseanreesermsft in Set timeoutInMinutes to 0 for Windows build job dotnet/aspnetcore#64126

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1 What's Changed

Report the number of escape characters formatted into themed sequence rendering by @nblumhardt in Report the number of escape characters formatted into themed sequence rendering serilog/serilog-sinks-console#136

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

#165 - support for {UtcTimestamp} in output templates (@ManuelRin)
#172, #173 - switch build to Serilog org standard (@nblumhardt)

Commits viewable in compare view.

Updated System.Net.Http.Json from 9.0.10 to 9.0.11.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Google.Cloud.Firestore from 3.11.0 to 3.13.0 Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 9.0.10 to 9.0.11 Bumps Microsoft.AspNetCore.DataProtection.StackExchangeRedis from 9.0.10 to 9.0.11 Bumps Microsoft.AspNetCore.SpaProxy from 9.0.10 to 9.0.11 Bumps Microsoft.Data.SqlClient from 6.1.2 to 6.1.3 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 9.0.10 to 9.0.11 Bumps Microsoft.Extensions.Http.Polly from 9.0.10 to 9.0.11 Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1 Bumps System.Net.Http.Json from 9.0.10 to 9.0.11 --- updated-dependencies: - dependency-name: Google.Cloud.Firestore dependency-version: 3.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-api-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Microsoft.AspNetCore.DataProtection.StackExchangeRedis dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Microsoft.AspNetCore.SpaProxy dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Microsoft.Data.SqlClient dependency-version: 6.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Microsoft.Extensions.Http.Polly dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies - dependency-name: Serilog.Sinks.Console dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-api-dependencies - dependency-name: System.Net.Http.Json dependency-version: 9.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-api-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jan 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the safe-api-dependencies group with 9 updates #424

Bump the safe-api-dependencies group with 9 updates #424

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the safe-api-dependencies group with 9 updates #424

Are you sure you want to change the base?

Bump the safe-api-dependencies group with 9 updates #424

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

3.13.0

New features

9.0.11

What's Changed

9.0.11

What's Changed

9.0.11

What's Changed

6.1.3

Added

App Context Switch for Ignoring Server-Provided Failover Partner

Fixed

Target Platform Support

Dependencies

.NET Framework 4.6.2+

9.0.11

What's Changed

9.0.11

What's Changed

6.1.1

What's Changed

6.1.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant