Skip to content

chore(deps): Bump the microsoft-extensions group with 2 updates#82

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/microsoft-extensions-66c1b25c09
Closed

chore(deps): Bump the microsoft-extensions group with 2 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/microsoft-extensions-66c1b25c09

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 23, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.27.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 9.0.5 to 9.0.16.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.12...v9.0.13

9.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Cosmos/FTS: Improved FullTextScore Translation for Multiple Keywords
    The translation of FullTextScore in Cosmos Full-Text Search has been updated to use multiple keywords instead of a keyword array, addressing issues with search accuracy and query compatibility. This resolves #​35983 and ensures more reliable full-text search results.
    #​36000 by @​maumar

Dependency Updates

  • [release/8.0] Update dependencies from dotnet/arcade
    Updated the Arcade build infrastructure dependencies for the 8.0 release branch, bringing in the latest improvements and security fixes from the Arcade ecosystem.
    #​35930 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Updated Arcade dependencies for the 9.0 release branch, ensuring the build system benefits from the latest tooling and reliability enhancements.
    #​36006 by @​dotnet-maestro
  • [release/8.0] Update dependencies from dotnet/arcade
    Another update to Arcade dependencies for the 8.0 branch, further aligning with upstream improvements and fixes.
    #​36085 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Additional update to Arcade dependencies for the 9.0 branch, maintaining up-to-date build tooling and infrastructure.
    #​36065 by @​dotnet-maestro

Technical Improvements

  • Merging Internal Commits for release/8.0
    Integrated various internal commits into the 8.0 release branch, improving code quality, maintainability, and aligning with internal standards.
    #​35926 by @​vseanreesermsft
  • Merging Internal Commits for release/8.0
    Additional internal commits merged into the 8.0 branch, further enhancing stability and maintainability.
    #​36080 by @​vseanreesermsft
  • Merging Internal Commits for release/9.0
    Integrated internal improvements into the 9.0 branch, ensuring consistency and codebase health.
    #​36081 by @​vseanreesermsft

Infrastructure

  • Update Branding to 9.0.6
    Updated the product branding and version numbers to 9.0.6, ensuring that all assemblies and packages reflect the correct release version.
    #​36044 by @​vseanreesermsft
  • Update Branding to 8.0.17
    Updated branding for the 8.0 release line to version 8.0.17, keeping versioning consistent across all release artifacts.
    #​36043 by @​vseanreesermsft

Miscellaneous

  • [automated] Merge branch 'release/8.0' => 'release/9.0'
    Automated merge of changes from the 8.0 branch into the 9.0 branch, ensuring that all relevant fixes and improvements are carried forward.
    #​35927 by @​github-actions
  • Merge release/9.0 to release/9.0-staging
    Merged the 9.0 branch into the 9.0-staging branch, preparing for further testing and validation before final release.
    #​36051 by @​AndriySvyryd
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated core dependencies to include the latest security patches, performance optimizations, and bug fixes, enhancing overall application stability and reliability.

Review Change Stack

Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.11 to 8.0.27
Bumps Microsoft.EntityFrameworkCore.Relational from 9.0.5 to 9.0.16

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 9.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-extensions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 23, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 23, 2026

Labels

The following labels could not be found: dotnet. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 23, 2026

📝 Walkthrough

Walkthrough

Two NuGet package versions are bumped in the centralized package configuration: Microsoft.EntityFrameworkCore.Relational to version 9.0.16 and Microsoft.AspNetCore.Mvc.Testing to version 8.0.27, bringing patch-level security and stability updates to the project dependencies.

Changes

Package Version Updates

Layer / File(s) Summary
NuGet package version bumps
Directory.Packages.props
Microsoft.EntityFrameworkCore.Relational is updated from 9.0.5 to 9.0.16, and Microsoft.AspNetCore.Mvc.Testing is updated from 8.0.11 to 8.0.27 in the centralized package management file.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A rabbit hops through versions spun,
Patch updates, one, and then there's one,
EntityFramework and AspNetCore aligned,
Dependencies refreshed, the security refined! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: bumping NuGet package versions in the microsoft-extensions group with 2 specific updates to Microsoft.EntityFrameworkCore.Relational and Microsoft.AspNetCore.Mvc.Testing.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/nuget/microsoft-extensions-66c1b25c09

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@Directory.Packages.props`:
- Line 15: The EF Core package versions are inconsistent: PackageVersion entries
for Microsoft.EntityFrameworkCore and Microsoft.EntityFrameworkCore.InMemory are
9.0.5 while Microsoft.EntityFrameworkCore.Relational is 9.0.16; update the
centralized versions so all EF Core family PackageVersion includes
(Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Relational,
Microsoft.EntityFrameworkCore.InMemory) use the same patch version (pick either
9.0.16 or 9.0.5) to ensure consistent resolution across projects; modify the
Version attribute for the mismatched PackageVersion elements to the chosen
unified version.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1006eb48-fcb8-43c6-aec4-b0b4b07e3bb6

📥 Commits

Reviewing files that changed from the base of the PR and between aed1f24 and 638cfb4.

📒 Files selected for processing (1)
  • Directory.Packages.props

Comment thread Directory.Packages.props
<ItemGroup Label="Infrastructure">
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="9.0.5" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="9.0.5" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="9.0.16" />
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Read-only verification: confirm EF Core family version drift in centralized package config
rg -n 'PackageVersion Include="Microsoft\.EntityFrameworkCore(|\.Relational|\.InMemory)"' Directory.Packages.props

# Read-only verification: check if any project pins EF Core versions directly (bypassing central alignment)
rg -n 'PackageReference Include="Microsoft\.EntityFrameworkCore(|\.Relational|\.InMemory)"|Version=' --iglob '*.csproj' --iglob '*.props' --iglob '*.targets'

Repository: phuong-labs/axis

Length of output: 5514


🏁 Script executed:

#!/bin/bash
rg -n 'PackageVersion Include="Microsoft\.EntityFrameworkCore[^"]*"' Directory.Packages.props

Repository: phuong-labs/axis

Length of output: 327


Align EF Core package versions across the centralized package family.

In Directory.Packages.props, Microsoft.EntityFrameworkCore.Relational is 9.0.16, but Microsoft.EntityFrameworkCore (line 14) and Microsoft.EntityFrameworkCore.InMemory (line 62) remain 9.0.5. Keep the EF Core family on the same patch version to avoid central/package alignment issues and inconsistent behavior (projects consume these versions centrally).

Suggested alignment
-    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="9.0.5" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="9.0.16" />
...
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.5" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.16" />
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@Directory.Packages.props` at line 15, The EF Core package versions are
inconsistent: PackageVersion entries for Microsoft.EntityFrameworkCore and
Microsoft.EntityFrameworkCore.InMemory are 9.0.5 while
Microsoft.EntityFrameworkCore.Relational is 9.0.16; update the centralized
versions so all EF Core family PackageVersion includes
(Microsoft.EntityFrameworkCore, Microsoft.EntityFrameworkCore.Relational,
Microsoft.EntityFrameworkCore.InMemory) use the same patch version (pick either
9.0.16 or 9.0.5) to ensure consistent resolution across projects; modify the
Version attribute for the mismatched PackageVersion elements to the chosen
unified version.

@phuongnse
Copy link
Copy Markdown
Owner

Closing — Dependabot generated this from the pre-PR #81 base. PR #81 already landed both bumps (Microsoft.EntityFrameworkCore.Relational 9.0.5 → 9.0.16, Microsoft.AspNetCore.Mvc.Testing 8.0.11 → 8.0.27) properly aligned with the rest of the EF Core trio and ASP.NET Core 8.x pair. Marked CONFLICTING by GitHub because main already has the new versions; nothing left to apply.

@phuongnse phuongnse closed this May 23, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 23, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@phuongnse phuongnse deleted the dependabot/nuget/microsoft-extensions-66c1b25c09 branch May 23, 2026 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cosmos/FTS: update translation of FullTextScore to use multiple keywords rather than keyword array

1 participant